274 matches found
i-librarian 跨站脚本漏洞
i-librarian is an online service from Martin Kucej Personal Developer that will organize your PDF files and office document collections. A cross-site scripting vulnerability exists in i-librarian versions prior to 5.11.1, which stems from PDF notes being displayed without any form of validation o...
CVE-2024-1827
A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file Source/librarian/user/teacher/login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...
Sql injection
A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. Affected is an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the argument email/idno/phone/username leads to sql injection. It is possible to launc...
CVE-2024-1829 code-projects Library System registration.php sql injection
A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...
CVE-2024-1827 code-projects Library System login.php sql injection
A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file Source/librarian/user/teacher/login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...
CVE-2024-1826 code-projects Library System login.php sql injection
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/librarian/user/student/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...
CVE-2023-3020
Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
CVE-2023-3020
Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
CVE-2023-3021
Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
Cross site scripting
Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free
Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
CVE-2023-3021
CVE-2023-3021 concerns the i-librarian-free web application (GitHub repo mkucej/i-librarian-free) and is a Stored XSS vulnerability present in versions prior to 5.10.4. The available connected data indicate an stored XSS issue in the application, with exploitation illustrated in a Huntr entry des...
i-librarian 跨站脚本漏洞
i-librarian is an online service by Martin Kucej Personal Developer that will organize your PDF files and office document sets. A cross-site scripting vulnerability exists in i-librarian-free versions prior to 5.10.4. An attacker could exploit this vulnerability to perform cross-site scripting...
CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free
Cross-site Scripting XSS - Reflected in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free
Cross-site Scripting XSS - Stored in GitHub repository mkucej/i-librarian-free prior to 5.10.4...
i-librarian 跨站脚本漏洞
i-librarian is an online service by Martin Kucej Personal Developer that will organize your PDF files and office document sets. A cross-site scripting vulnerability exists in i-librarian-free versions prior to 5.10.4. An attacker could exploit this vulnerability to perform cross-site scripting...
CVE-2023-3020
CVE-2023-3020 affects the web app i-librarian-free (GitHub: mkucej/i-librarian-free) and is a reflected Cross-site Scripting (XSS) vulnerability present in versions prior to 5.10.4 . The issue arises from reflecting unsanitized user input in the search/query flow (evidenced by “Reflected XSS at s...