CVE-2025-11426

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbook.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. T...

CVE-2025-11426 projectworlds Advanced Library Management System edit_book.php unrestricted upload

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbook.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. T...

CVE-2025-11426

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbook.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. T...

CVE-2024-6008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Online Book Store up to 1.0. Affected is an unknown function of the file /editbook.php. The manipulation of the argument image leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2020-19114

SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to editbook.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19107

SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to editbook.php, which could let a remote malicious user execute arbitrary code...

CVE-2020-19114

The CVE-2020-19114 entry describes an SQL injection in Online Book Store v1.0 that is exploitable via the publisher parameter to edit_book.php, enabling a remote attacker to execute arbitrary code. The vulnerability arises from improper input handling allowing crafted SQL commands to be injected ...

CVE-2018-14686

system/editbook.php in XYCMS 1.7 has stored XSS via a crafted adddo.php request, related to addbook.php...

CVE-2018-14686

The CVE-2018-14686 entry affects XYCMS 1.7 and describes a stored cross-site scripting (XSS) vulnerability in system/edit_book.php, triggered by a crafted request to add_do.php (related to add_book.php). Root cause, as stated, is a malicious payload stored via the add_do.php flow, enabling script...