PT-2025-51151 · Unknown · Computer Book Store

Jjjjjzr · Published 2025-12-14 · Updated 2025-12-22 · CVE-2025-14647

Positive Technologies · (AI Summary)

CVSS v3.1

9.8

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Computer Book Store version 1.0

Description A weakness exists in Computer Book Store version 1.0 related to SQL injection. The issue is located in the

/admin delete.php

file, specifically within an unknown function. Manipulation of the

bookisbn

argument can trigger the SQL injection. The attack can be initiated remotely, and the exploit has been publicly released.

Recommendations Apply a fix to the vulnerable function in

/admin delete.php

to prevent manipulation of the

bookisbn

argument.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2025-14647

Affected Products

Computer Book Store

References · 14

• 🔥 https://github.com/jjjjj-zr/jjjjjzr11/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14647 · Security Note
• https://vuldb.com/?ctiid.336380 · Note
• https://vuldb.com/?submit.709618 · Note
• https://twitter.com/VulmonFeeds/status/2000108088515256678 · Twitter Post
• https://vuldb.com/?id.336380 · Note
• https://t.me/CVEtracker/39759 · Telegram Post
• https://code-projects.org · Note
• https://twitter.com/cracbot/status/2001970829433950642 · Twitter Post
• https://t.me/cveNotify/146563 · Telegram Post
• https://t.me/cveNotify/145696 · Telegram Post
• https://twitter.com/RedPacketSec/status/2000312075415851409 · Twitter Post
• https://twitter.com/TheHackerWire/status/2000115220346524053 · Twitter Post
• https://twitter.com/CVEnew/status/2000246117133345207 · Twitter Post