PT-2025-17982 · Withstars · Books-Management-System

Name of the Vulnerable Software and Affected Versions: withstars Books-Management-System version 1.0 Description: A vulnerability was found in the withstars Books-Management-System. It has been classified as problematic and affects an unknown function of the file /book edit do.html of the compone...

PT-2025-17986 · Unknown · Withstars Books-Management-System

Name of the Vulnerable Software and Affected Versions: withstars Books-Management-System version 1.0 Description: A vulnerability was found in the withstars Books-Management-System, affecting unknown code of the file "/api/comment/add" of the component Comment Handler. The manipulation of the...

Books-Management-System 安全漏洞

Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from a misbehavior in the file /allreaders.html resulting in a missing authorization...

PT-2025-17990 · Unknown · Withstars Books-Management-System

Name of the Vulnerable Software and Affected Versions: withstars Books-Management-System version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the /api/article/del API endpoint of the Article Handler component. This issue leads to cross-site...

PT-2025-17985 · Withstars · Books-Management-System

Name of the Vulnerable Software and Affected Versions: withstars Books-Management-System version 1.0 Description: A vulnerability has been found in withstars Books-Management-System. This affects an unknown part of the file "/admin/article/add/do". The manipulation of the argument Title leads to...

Books-Management-System 代码注入漏洞

Books-Management-System is a book management system by withstars individual developer. A code injection vulnerability exists in Books-Management-System version 1.0, which originates from cross-site scripting due to misbehavior of the parameter Name in the file /bookeditdo.html...

Books-Management-System 安全漏洞

Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from an incorrect operation of the file /admin/article/list resulting in a missing authorization...

Books-Management-System 安全漏洞

Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from a cross-site request forgery due to a misbehavior in file/api/article/del...

Books-Management-System 代码注入漏洞

Books-Management-System is a book management system by withstars individual developers. A code injection vulnerability exists in Books-Management-System version 1.0, which originates from cross-site scripting due to a misbehavior of the parameter content in file/api/comment/add...

Novel-Plus 注入漏洞

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An injection vulnerability exists in Novel-Plus version 3.5.0, which stems from improper manipulation of the sort parameter in the /api/front/search/books file, which could lead to an SQL injection attack...

CVE-2024-8679

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the ‘value' parameter of the owtlibhandler AJAX action in all versions up to, and including, 3.1 due to insufficient escaping on the user supplied parameter and lack of sufficien...

Cross-site Scripting (XSS)

Overview calibreweb is a Web app for browsing, reading and downloading eBooks stored in a Calibre database. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the editbooks.js component due to improper user input sanitization. An attacker can inject malicious...

CVE-2024-44786

Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vectors...

CVE-2024-44786

Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vectors...

PT-2024-31249 · Unknown · Meabilis Cms

Name of the Vulnerable Software and Affected Versions: Meabilis CMS version 1.0 Description: The issue allows attackers to bypass access controls and access other users' address books through unspecified vectors. Recommendations: For Meabilis CMS version 1.0, at the moment, there is no informatio...

CVE-2024-44786

Incorrect access control in Meabilis CMS 1.0 allows attackers to access other users' address books via unspecified vectors...

CVE-2024-44786

The Meabilis CMS version 1.0 is vulnerable to an incorrect access control flaw. This vulnerability allows an attacker to bypass security measures to access other users' address books via unspecified vectors . There is currently no information regarding a newer version or a specific patch to remed...

PT-2024-11005

Name of the Vulnerable Software and Affected Versions janeczku/calibre-web affected versions not specified Description A Cross-site Scripting XSS issue exists, specifically in the file edit books.js, when editing book properties, such as uploading a cover or a format. The affected code directly...

davidmasonbooks.com Cross Site Scripting vulnerability OBB-3958156

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bilingual-books-for-kids.com Cross Site Scripting vulnerability OBB-3950993

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...