Online Library Management System SQL注入漏洞

SourceCodester Online Library Management System is an online library management system. A SQL injection vulnerability exists in Online Library Management System version 1.0 that originates from unknown code affecting the file lab.php. Input 1 UNION ALL SELECT NULL,NULL,NULL,NULL,CONCAT0x71716b717...

Library Management System跨站脚本漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System has a cross-site scripting vulnerability that originates in the file /admin/editadmindetails.php?id= The admin's parameter Name lacks a...

Library Management System SQL Injection Vulnerability (CNVD-2022-61297)

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...

Library Management System File Upload Vulnerability

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to file uploads due to a lack of validation of uploaded files in the parameter image in the file /card/index.php. The...

CVE-2022-2212

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2022-2212

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2022-2213

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...

CVE-2022-2214

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...

CVE-2022-2213

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...

CVE-2022-2214

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...

Sql injection

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...

Cross site scripting

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...

Design/Logic Flaw

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2022-2214 SourceCodester Library Management System bookdetails.php sql injection

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...

CVE-2022-2214

Overview: CVE-2022-2214 affects the SourceCodester Library Management System 1.0. Vulnerability: SQL injection in the /librarian/bookdetails.php endpoint via the id parameter (e.g., ' AND (SELECT 9198 FROM (SELECT(SLEEP(5)))iqZA)-- PbtB ), allowing remote attacker input to alter SQL logic. Impact...

CVE-2022-2214 SourceCodester Library Management System bookdetails.php sql injection

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...

CVE-2022-2213 SourceCodester Library Management System cross site scripting

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...

CVE-2022-2213

The CVE-2022-2213 entry concerns SourceCodester Library Management System 1.0. Affects the admin/edit_admin_details.php?id=admin function, where manipulating the Name parameter enables cross-site scripting (XSS). The vulnerability is exploitable remotely and the exploit has been published publicl...

CVE-2022-2213 SourceCodester Library Management System cross site scripting

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...

CVE-2022-2212

CVE-2022-2212 affects SourceCodester Library Management System 1.0, specifically the /card/index.php component. The vulnerability arises from lack of validation of the image parameter during file upload, enabling unrestricted file uploads. This could allow remote attackers to upload malicious fil...