CVE-2020-36003: SQL Injection
Published Feb 17, 2021
·Updated
The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases.
Affected Software
1 affected component
Online Book Store Project Online Book Store=1.0
Event History
Feb 17, 2021
CVE Published
via MITRE·02:32 PM
Data Sourced
via MITRE·02:32 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-36003?
CVE-2020-36003 has a high severity rating as it allows remote attackers to perform union-based blind SQL injection.
2
How do I fix CVE-2020-36003?
To fix CVE-2020-36003, validate and sanitize the 'id' parameter in detail.php to prevent SQL injection vulnerabilities.
3
What systems are impacted by CVE-2020-36003?
CVE-2020-36003 affects Online Book Store version 1.0.
4
What type of vulnerability is CVE-2020-36003?
CVE-2020-36003 is classified as a SQL injection vulnerability allowing unauthorized database access.
5
Can CVE-2020-36003 lead to data theft?
Yes, CVE-2020-36003 can lead to data theft by allowing attackers to retrieve sensitive information from the database.