Description
Online Book System 是一个基于 PHP、CSS、JS 和 MySQL 的在线书籍管理系统。该系统的 /index.php 接口存在 SQL 注入漏洞，攻击者可以通过向 'login_password' 参数发送特制的 SQL 查询，绕过身份验证并获取敏感信息。此漏洞可能导致数据库泄露、数据篡改或远程代码执行。
Online Book System /index.php SQL 注入漏洞 （CVE-2024-3000）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-3000
https://cve.imfht.com/detail/CVE-2024-3000
https://vuldb.com/vuln/258202
https://www.sentinelone.com/vulnerability-database/cve-2024-3000/
https://github.com/BurakSevben/CVEs/blob/main/Online%20Book%20System/Online%20Book%20System%20-%20Authentication%20Bypass.md
http://sxxdckj.com/cms/a/Online-Book-System-index-php-wen-jian-SQL-zhu-ru-lou-dong.html
https://vulners.com/cve/CVE-2024-3000
https://avd.aquasec.com/nvd/2024/cve-2024-3000/
https://www.cve.org/CVERecord?id=CVE-2024-3000