← CVE Radar
CVE-2026-123028itsourcecode Online Book Store admin_edit.php sql injection
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /admin_edit.php. The manipulation of the argument bookisbn with the input 1%27%20AND%20GTID_SUBSET(CONCAT(0x71717a6b71,(SELECT%20(ELT(6040=6040,1))),0x716b6a7171),6040)--%20LpDt as part of String leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.
6.9 MEDIUMEPSS 0.35%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.9 | MEDIUM | 4.0VulDB (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| 5.5 | MEDIUM | 4.0VulDB (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| 7.3 | HIGH | 3.1VulDB (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| 7.3 | HIGH | 3.1VulDB (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:R |
| 7.3 | HIGH | 3.0VulDB (CNA) | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RC:R |
| 7.5 | HIGH | 2.0VulDB (CNA) | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| 7.5 | HIGH | 2.0VulDB (CNA) | AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR |
Details
- CVE ID
- CVE-2026-123028
- Status
- Deferred
- Assigner (CNA)
- VulDB
- Published
- Nov 5, 2026
- Last modified
- 2026-11-06 09:17 UTC
Affected Products
As published by the CNA in the CVE record.
itsourcecodeOnline Book Store1 version range
- 1.0