CVE-2021-43155: SQL Injection
Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-43155?
CVE-2021-43155 is a vulnerability in Projectsworlds Online Book Store PHP v1.0 that allows SQL injection via the "bookisbn" parameter in the cart.php file.
How severe is CVE-2021-43155?
CVE-2021-43155 has a severity rating of 9.8 (critical).
How does CVE-2021-43155 affect Projectsworlds Online Book Store PHP v1.0?
CVE-2021-43155 affects Projectsworlds Online Book Store PHP v1.0 by allowing SQL injection attacks through the "bookisbn" parameter in the cart.php file.
Is there a fix for CVE-2021-43155?
Yes, to fix CVE-2021-43155, you should implement proper input validation and parameterized queries in the affected code to prevent SQL injection attacks.
Where can I find more information about CVE-2021-43155?
You can find more information about CVE-2021-43155 on the GitHub repository of Projectsworlds Online Book Store PHP v1.0. The link to the relevant issue is provided here: [GitHub Issue](https://github.com/projectworldsofficial/online-book-store-project-in-php/issues/18).