CVE-2024-2271

A vulnerability classified as critical has been found in keerti1924 Online-Book-Store-Website 1.0. This affects an unknown part of the file /shop.php of the component HTTP POST Request Handler. The manipulation of the argument product_name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256041 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Blind%20SQL%20Injection%20%20Shop/Blind%20SQL%20Injection%20Shop.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256041Permissions Required
• https://vuldb.com/?id.256041Permissions Required
• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Blind%20SQL%20Injection%20%20Shop/Blind%20SQL%20Injection%20Shop.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256041Permissions Required
• https://vuldb.com/?id.256041Permissions Required

Published

Mar 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2268A vulnerability was found in keerti1924 Online-Book-Store-We…9.8
• CVE-2024-22682Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2024-2269A vulnerability was found in keerti1924 Online-Book-Store-We…9.8
• CVE-2024-22699FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vul…8.8
• CVE-2024-2270A vulnerability was found in keerti1924 Online-Book-Store-We…6.1
• CVE-2024-22705An issue was discovered in ksmbd in the Linux kernel before …7.8
• CVE-2024-22714Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Script…6.1
• CVE-2024-22715Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-…8.8
• CVE-2024-22717Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1…6.1
• CVE-2024-22718Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1…9.6
• CVE-2024-22719SQL Injection vulnerability in Form Tools 3.1.1 allows attac…8.1
• CVE-2024-2272A vulnerability classified as critical was found in keerti19…9.8