CVE-2023-43739: Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)
Published Sep 28, 2023
·Updated
The 'bookisbn' parameter of the cart.php resource
does not validate the characters received and they
are sent unfiltered to the database.
Affected Software
1 affected component
Online Book Store Project Project Online Book Store Project=1.0
Event History
Sep 28, 2023
CVE Published
via MITRE·09:32 PM
Data Sourced
via MITRE·09:32 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-43739?
The severity of CVE-2023-43739 is critical with a score of 9.8.
2
What is the affected software of CVE-2023-43739?
The affected software of CVE-2023-43739 is Online Book Store Project version 1.0.
3
How does CVE-2023-43739 impact the system?
CVE-2023-43739 allows for unvalidated characters to be sent to the database, posing a threat to the system's security.
4
Are there any references for CVE-2023-43739?
Yes, you can find references for CVE-2023-43739 at the following URLs: [fluidattacks.com](https://fluidattacks.com/advisories/filth) and [projectworlds.in](https://projectworlds.in/).
5
How do I fix CVE-2023-43739?
To fix CVE-2023-43739, validate the characters received through the 'bookisbn' parameter before sending them to the database.