CVE-2024-2272

A vulnerability classified as critical was found in keerti1924 Online-Book-Store-Website 1.0. This vulnerability affects unknown code of the file /home.php of the component HTTP POST Request Handler. The manipulation of the argument product_name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-256042 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Blind%20SQL%20Injection%20%20Home/Blind%20SQL%20Injection%20Home.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256042Permissions Required
• https://vuldb.com/?id.256042Permissions Required
• https://github.com/skid-nochizplz/skid-nochizplz/blob/main/TrashBin/CVE/keerti1924%20Online-Book-Store-Website/Blind%20SQL%20Injection%20%20Home/Blind%20SQL%20Injection%20Home.php%20.mdBroken Link
• https://vuldb.com/?ctiid.256042Permissions Required
• https://vuldb.com/?id.256042Permissions Required

Published

Mar 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2271A vulnerability classified as critical has been found in kee…9.8
• CVE-2024-22714Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Script…6.1
• CVE-2024-22715Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-…8.8
• CVE-2024-22717Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1…6.1
• CVE-2024-22718Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1…9.6
• CVE-2024-22719SQL Injection vulnerability in Form Tools 3.1.1 allows attac…8.1
• CVE-2024-22720Kanboard 1.2.34 is vulnerable to Html Injection in the group…4.8
• CVE-2024-22721Cross Site Request Forgery (CSRF) vulnerability in Form Tool…6.3
• CVE-2024-22722Server Side Template Injection (SSTI) vulnerability in Form …7.2
• CVE-2024-22723Webtrees 2.1.18 is vulnerable to Directory Traversal. By man…4.9
• CVE-2024-22724An issue was discovered in osCommerce v4, allows local attac…6.6
• CVE-2024-22725Orthanc versions before 1.12.2 are affected by a reflected c…6.1