CVE-2026-90941

novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP o...

CVE-2026-90941

novel-plus through 5.3.3 contains an authorization bypass in the BookController download endpoint , allowing authenticated backend accounts to export complete book text—including paid chapters —by supplying a bookId and bookName , without VIP or purchase verification. The vulnerability bypasses t...

CVE-2026-90941 novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint

novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP o...

EUVD-2026-77485

novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP o...

CVE-2026-90941 novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint

novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP o...

CVE-2026-90941 novel-plus through 5.3.3 Missing Authorization on the Admin Book Download Endpoint

novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP o...

PT-2026-91245

Name of the Vulnerable Software and Affected Versions novel-plus versions prior to 5.3.4 Description An authorization bypass exists in the download endpoint of the BookController. This issue allows authenticated backend accounts to export the complete text of a book, including paid chapters, by...

CVE-2026-90941: Missing Authorization

novel-plus through 5.3.3 contains an authorization bypass vulnerability in the BookController download endpoint that allows authenticated backend accounts to export complete book text including paid chapters. Attackers can supply a bookId and bookName to retrieve all chapter content without VIP o...

PT-2026-8325

Name of the Vulnerable Software and Affected Versions zhanghuanhao LibrarySystem 图书馆管理系统 versions up to 1.1.1 Description A flaw exists in zhanghuanhao LibrarySystem 图书馆管理系统 up to version 1.1.1, relating to improper access controls. The issue is present in an unknown function within the...

LibrarySystem 访问控制错误漏洞

LibrarySystem is a book management system developed by Walton’s individual developers. Versions of LibrarySystem prior to 1.1.1 contained an access control vulnerability. This vulnerability stemmed from improper access control in the BookController.java file, which could lead to remote attacks...

EUVD-2025-10540

Malicious code in bioql PyPI...

CVE-2025-29391

horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php...

CVE-2025-29391

horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php...

CVE-2025-29391

horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php...

CVE-2025-29391

horvey Library-Manager v1.0 is vulnerable to SQL Injection in Admin/Controller/BookController.class.php...

Library-Manager 安全漏洞

Library-Manager is a simple library management system by Horvey Personal Developer. A security vulnerability exists in Library-Manager version 1.0, which stems from a SQL injection in BookController.class.php...