271 matches found
Librarian Sues Equifax Over 2017 Data Breach, Wins $600
In the days following revelations last September that big-three consumer credit bureau Equifax had been hacked and relieved of personal data on nearly 150 million people, many Americans no doubt felt resigned and powerless to control their information. But not Jessamyn West. The 49-year-old...
Scilico I, Librarian 'id' Parameter Cross-Site Scripting Vulnerability
Scilico I, Librarian is the United States Scilico company a set of online PDF document management system. A cross-site scripting vulnerability exists in the 'id' parameter of the stable.php file in Scilico I, Librarian 4.8 and earlier versions. A remote attacker can exploit this vulnerability to...
Scilico I, Librarian Cross-Site Request Forgery Vulnerability
Scilico I, Librarian is the United States Scilico company a set of online PDF document management system. A cross-site request forgery vulnerability exists in the users.php file in Scilico I, Librarian 4.8 and earlier versions. A remote attacker could exploit this vulnerability to change the...
Scilico I, Librarian server-side request forgery vulnerability (CNVD-2018-06447)
Scilico I, Librarian is the United States Scilico company a set of online PDF document management system. A security vulnerability exists in the 'url' parameter of getFromWeb in the functions.php file in Scilico I, Librarian 4.8 and earlier versions. An attacker can exploit this vulnerability to...
Scilico I, Librarian Access Control Error Vulnerability
Scilico I, Librarian is the United States Scilico company a set of online PDF document management system. An access control error vulnerability exists in the ajaxdiscussion.php file in Scilico I, Librarian 4.9 and earlier versions. An attacker can exploit this vulnerability to gain unauthorized...
Cross site scripting
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
Server side request forgery (ssrf)
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...
Cross site request forgery (csrf)
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
Improper access control
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access read, write and delete to project discussions...
CVE-2018-1000141
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access read, write and delete to project discussions...
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000138
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...
CVE-2018-1000138
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...
CVE-2018-1000137
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
CVE-2018-1000137
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000141
The CVE-2018-1000141 entry concerns Librarian (Scilico I, Librarian) 4.9 and earlier, with an Incorrect Access Control flaw in ajaxdiscussion.php that lets any user read, write, or delete project discussions. The connected Red Hat/CNVD/EUVD/OSV/PRION/CVE listings corroborate the same description....
CVE-2018-1000138
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...