A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/jjjjj-zr/jjjjjzr11/issues/2 | Exploit Issue Tracking Third Party Advisory |
| https://vuldb.com/?ctiid.336380 | Permissions Required VDB Entry |
| https://vuldb.com/?id.336380 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.709618 | Third Party Advisory VDB Entry |
Configurations
History
22 Dec 2025, 18:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:carmelo:computer_book_store:1.0:*:*:*:*:*:*:* | |
| References | () https://code-projects.org/ - Product | |
| References | () https://github.com/jjjjj-zr/jjjjjzr11/issues/2 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.336380 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.336380 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.709618 - Third Party Advisory, VDB Entry | |
| First Time |
Carmelo
Carmelo computer Book Store |
14 Dec 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-14 07:15
Updated : 2025-12-22 18:21
NVD link : CVE-2025-14647
Mitre link : CVE-2025-14647
CVE.ORG link : CVE-2025-14647
JSON object : View
Products Affected
carmelo
- computer_book_store