Threats tagged 'ghsa-7g36-c3hq-cwg3'

A SQL injection vulnerability exists in itsourcecode Online Book Store 1.0 in the /book.php file via the bookisbn parameter. This vulnerability allows remote attackers with low privileges to execute unauthorized SQL commands. The flaw has been publicly disclosed and may be exploited. The CVSS score is 6.3, indicating medium severity.