CVE-2024-55496

Name of the Vulnerable Software and Affected Versions 1000projects Bookstore Management System PHP MySQL Project version 1.0

Description A vulnerability has been found in the 1000projects Bookstore Management System PHP MySQL Project. This issue affects some unknown functionality of the "add company.php" file. Actions on the delete parameter result in SQL injection.

Recommendations For version 1.0, consider disabling the delete parameter in the "add company.php" file until a patch is available to prevent SQL injection attacks. Restrict access to the "add company.php" file to minimize the risk of exploitation. Avoid using the delete parameter in the affected functionality until the issue is resolved.