CVE-2025-0296: code-projects Online Book Shop booklist.php sql injection
A vulnerability was found in code-projects Online Book Shop 1.0. It has been classified as critical. This affects an unknown part of the file /booklist.php. The manipulation of the argument subcatid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0296?
CVE-2025-0296 has been classified as critical due to its potential for remote SQL injection.
How do I fix CVE-2025-0296?
To fix CVE-2025-0296, sanitize user input in the subcatid argument and implement prepared statements in the SQL queries.
What software is affected by CVE-2025-0296?
CVE-2025-0296 affects the code-projects Online Book Shop version 1.0.
Can CVE-2025-0296 be exploited remotely?
Yes, CVE-2025-0296 can be exploited remotely by manipulating the subcatid parameter.
What impact does CVE-2025-0296 have on the system?
CVE-2025-0296 allows attackers to execute arbitrary SQL queries, which could compromise the database security.