PT-2025-51151 · Unknown · Computer Book Store

Jjjjjzr · Published 2025-12-14 · Updated 2025-12-22 · CVE-2025-14647

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Computer Book Store version 1.0

Description A weakness exists in Computer Book Store version 1.0 related to SQL injection. The issue is located in the /admin delete.php file, specifically within an unknown function. Manipulation of the bookisbn argument can trigger the SQL injection. The attack can be initiated remotely, and the exploit has been publicly released.

Recommendations Apply a fix to the vulnerable function in /admin delete.php to prevent manipulation of the bookisbn argument.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-14647

Affected Products

Computer Book Store

References · 15

• 🔥 https://github.com/jjjjj-zr/jjjjjzr11/issues/2 · Exploit
• https://osv.dev/vulnerability/CVE-2025-14647 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-14647 · Security Note
• https://twitter.com/VulmonFeeds/status/2000108088515256678 · Twitter Post
• https://vuldb.com/?submit.709618 · Note
• https://twitter.com/RedPacketSec/status/2000312075415851409 · Twitter Post
• https://t.me/CVEtracker/39759 · Telegram Post
• https://vuldb.com/?id.336380 · Note
• https://twitter.com/cracbot/status/2001970829433950642 · Twitter Post
• https://vuldb.com/?ctiid.336380 · Note
• https://t.me/cveNotify/146563 · Telegram Post
• https://twitter.com/CVEnew/status/2000246117133345207 · Twitter Post
• https://t.me/cveNotify/145696 · Telegram Post
• https://code-projects.org · Note
• https://twitter.com/TheHackerWire/status/2000115220346524053 · Twitter Post