722 matches found
CVE-2024-12187
A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2024-12188 1000 Projects Library Management System stu.php sql injection
A vulnerability was found in 1000 Projects Library Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /brains/stu.php. The manipulation of the argument useri leads to sql injection. The attack can be launched remotely. T...
CVE-2024-12188
CVE-2024-12188 affects the 1000 Projects Library Management System v1.0. The vulnerability resides in the /brains/stu.php file, where the useri parameter leads to an SQL injection. The issue can be exploited remotely, and the exploit has been disclosed publicly. Several connected reports (Red Hat...
CVE-2024-12187 1000 Projects Library Management System showbook.php sql injection
A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
CVE-2024-12187 1000 Projects Library Management System showbook.php sql injection
A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
PT-2024-17479 · Unknown · 1000 Projects Library Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Library Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Library Management System. It affects an unknown functionality of the file /brains/stu.php. The manipulation of the useri...
1000 Projects Library Management System 安全漏洞
1000 Projects Library Management System is an open source library management system from 1000 Projects. A security vulnerability exists in 1000 Projects Library Management System version 1.0 due to a SQL injection in parameter q. The vulnerability is caused by the presence of a parameter q in the...
PT-2024-17478 · Unknown · 1000 Projects Library Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Library Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Library Management System, affecting an unknown function of the file /showbook.php. The manipulation of the q argument leads...
CVE-2024-8297
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...
CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...
CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...
CVE-2024-8297 kitsada8621 Digital Library Management System jwt_refresh_token_middleware.go JwtRefreshAuth neutralization for logs
A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...
CVE-2024-8297
Summary: CVE-2024-8297 affects kitsada8621 Digital Library Management System v1.0. The vulnerability lies in the function JwtRefreshAuth within middleware/jwt_refresh_token_middleware.go , where manipulation of the Authorization parameter leads to improper output neutralization for logs. This iss...
CVE-2024-40402
A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries...
CVE-2024-40402
A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries...
CVE-2024-40402
A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries...
CVE-2024-40402
Affected software: Sourcecodester Simple Library Management System 1.0. A SQL injection vulnerability exists in the ajax.php file due to insufficient input validation of the username parameter, enabling attackers to inject malicious SQL queries. Root cause: improper validation of user input in us...
PT-2024-28829 · Unknown · Sourcecodester Library Management System
Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Library Management System version 1.0 Description: A SQL injection issue was discovered due to insufficient validation of user input for the username parameter in the "ajax.php" file. This allows attackers to inject...