CVE-2024-28279 - Vulnerability Details - OpenCVE

Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Carmelo	Computer Book Store
Code-projects	Computer Book Store

Configuration 1 [-]

cpe:2.3:a:carmelo:computer_book_store:1.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://code-projects.org/computer-book-store-in-php-with-source-code/
https://github.com/unrealjbr/CVE-2024-28279

History

Thu, 10 Apr 2025 14:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Carmelo Carmelo computer Book Store
CPEs		cpe:2.3:a:carmelo:computer_book_store:1.0:::::::*
Vendors & Products		Carmelo Carmelo computer Book Store

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-05-13T19:54:12.353Z

Updated: 2025-02-13T15:47:35.771Z

Reserved: 2024-03-08T00:00:00.000Z

Link: CVE-2024-28279

Vulnrichment

Updated: 2024-08-02T00:48:49.664Z

NVD

Status : Analyzed

Published: 2024-05-14T15:14:18.757

Modified: 2025-04-10T14:13:50.587

Link: CVE-2024-28279

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-28279", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-02-13T15:47:35.771Z", "datePublished": "2024-05-13T19:54:12.353Z", "dateReserved": "2024-03-08T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-13T19:54:12.687Z"}, "descriptions": [{"lang": "en", "value": "Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://code-projects.org/computer-book-store-in-php-with-source-code/"}, {"url": "https://github.com/unrealjbr/CVE-2024-28279"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-28279", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-14T17:42:19.098051Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:code-projects:computer_book_store:1.0:*:*:*:*:*:*:*"], "vendor": "code-projects", "product": "computer_book_store", "versions": [{"status": "affected", "version": "1.0"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T18:03:41.322Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:49.664Z"}, "title": "CVE Program Container", "references": [{"url": "https://code-projects.org/computer-book-store-in-php-with-source-code/", "tags": ["x_transferred"]}, {"url": "https://github.com/unrealjbr/CVE-2024-28279", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://code-projects.org/computer-book-store-in-php-with-source-code/", "tags": ["x_transferred"]}, {"url": "https://github.com/unrealjbr/CVE-2024-28279", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:49.664Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-28279", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-14T17:42:19.098051Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:code-projects:computer_book_store:1.0:*:*:*:*:*:*:*"], "vendor": "code-projects", "product": "computer_book_store", "versions": [{"status": "affected", "version": "1.0"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-14T18:04:06.681Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://code-projects.org/computer-book-store-in-php-with-source-code/"}, {"url": "https://github.com/unrealjbr/CVE-2024-28279"}], "descriptions": [{"lang": "en", "value": "Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-05-13T19:54:12.687Z"}}}, "cveMetadata": {"cveId": "CVE-2024-28279", "state": "PUBLISHED", "dateUpdated": "2025-02-13T15:47:35.771Z", "dateReserved": "2024-03-08T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-05-13T19:54:12.353Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}