CVE-2025-0299: code-projects Online Book Shop search_result.php sql injection
Published Jan 7, 2025
·Updated
A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Online Book Shop
Code-projects Online Book Shop=1.0
Event History
Jan 7, 2025
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-0299?
CVE-2025-0299 is classified as a critical vulnerability.
2
Which software is affected by CVE-2025-0299?
CVE-2025-0299 affects code-projects Online Book Shop version 1.0.
3
What type of attack can be executed through CVE-2025-0299?
CVE-2025-0299 allows for SQL injection attacks due to improper handling of the argument 's'.
4
Is CVE-2025-0299 exploitable remotely?
Yes, CVE-2025-0299 can be exploited remotely.
5
How do I fix CVE-2025-0299?
To fix CVE-2025-0299, you should implement prepared statements or parameterized queries to prevent SQL injection.