Lucene search
+L

416 matches found

Openbugbounty
Openbugbounty
•added 2022/08/20 12:04 p.m.•24 views

mail.islamicurdubooks.com Cross Site Scripting vulnerability OBB-2855485

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•22 views

Fedora: Security Advisory for golang-github-mmarkdown-mmark (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Huntr
Huntr
•added 2022/07/11 9:06 a.m.•15 views

Cross-Site Request Forgery (CSRF)

Description An attacker is able to download data from a user via the CSV Export function. The export will include all the books on your shelves, books you have reviewed, and books with reading activity. Vulnerable URL https://bookwyrm.social/preferences/export/file Proof of Concept...

0.9AI score
SaveExploits0
Prion
Prion
•added 2022/07/01 12:15 a.m.•28 views

Sql injection

SQL Injection vulnerability in viaviwebtech Android EBook App Books App, PDF, ePub, Online Book Reading, Download Books 10 via the authorid parameter to api.php...

7.5CVSS9.4AI score0.01233EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2022/06/30 11:20 p.m.•98 views

CVE-2021-32428

The CVE-2021-32428 entry describes a SQL injection in the viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books). The vulnerability is triggered through the author_id parameter to api.php, indicating an input validation flaw in that endpoint. CVSS metrics indic...

9.8CVSS9.5AI score0.01233EPSS
SaveExploits0References4Affected Software1
Openbugbounty
Openbugbounty
•added 2022/06/18 6:54 a.m.•15 views

florisbooks.co.uk Cross Site Scripting vulnerability OBB-2655100

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/05/25 1:22 p.m.•15 views

gunshowbooks.com Cross Site Scripting vulnerability OBB-2627521

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
OSV
OSV
•added 2022/04/25 4:16 p.m.•10 views

CVE-2022-1156

The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00598EPSS
SaveExploits2References1
NVD
NVD
•added 2022/04/25 4:16 p.m.•22 views

CVE-2022-1156

The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00598EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/04/25 4:16 p.m.•11 views

CVE-2022-1156

The Books & Papers WordPress plugin through 0.20210223 does not escape its Custom DB prefix settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.5AI score0.00598EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/04/25 12:00 a.m.•10 views

WordPress plugin Books & Papers 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

4.8CVSS5AI score0.00598EPSS
SaveExploits2References3
Openbugbounty
Openbugbounty
•added 2022/04/21 8:27 a.m.•15 views

ldandkbooks.com Cross Site Scripting vulnerability OBB-2537631

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/04/12 3:57 p.m.•6 views

imlp-books.com Cross Site Scripting vulnerability OBB-2498786

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2022/03/29 4:38 p.m.•13 views

florisbooks.co.uk Cross Site Scripting vulnerability OBB-2453886

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SaveExploits0
Patchstack
Patchstack
•added 2022/03/29 12:00 a.m.•24 views

WordPress Books & Papers plugin <= 0.20210223 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by fuzzyap1 in WordPress Books & Papers plugin versions = 0.20210223. Solution Deactivate and delete. This plugin has been closed as of February 15, 2022 and is not available for download. This closure is temporary, pending a full review...

4.8CVSS2.7AI score0.00598EPSS
SaveExploits2References3Affected Software1
OSV
OSV
•added 2022/03/28 1:15 a.m.•14 views

CVE-2022-26268

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php...

9.8CVSS5.8AI score0.00956EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/03/28 1:15 a.m.•7 views

CVE-2022-26268

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php...

9.8CVSS6AI score0.00956EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/27 12:00 a.m.•11 views

xiaohuanxiong CMS SQL注入漏洞

xiaohuanxiong is an open source comic CMS by guoguo individual developers. xiaohuanxiong version 1.0 is vulnerable to SQL injection, which originates from the id parameter in /app/controller/Books.php. No detailed vulnerability details are available...

9.8CVSS5.8AI score0.00956EPSS
SaveExploits1References3
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•14 views

WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin < 3.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin versions 3.6. Solution Update the WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin to the...

4.4AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/02/28 12:00 a.m.•19 views

WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin < 3.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin versions 3.6. Solution Update the WordPress Books Gallery – Best Books Showcase & Library Plugin for WordPress plugin to the latest available version at...

2.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder