Xeroneit Library Management System 3.0 SQL Injection

-- Exploit Title: Xeroneit Library Management System SQLI Google Dork: "LMS v3.0 - Xerone IT " Date: 09/04/2020 Exploit Author: Sohel Yousef jellyfish security team Software Link: https://xeroneit.net/portfolio/library-management-system-lms Software Demo :https://xeroneit.co/demo/lms/home/login...

CVE-2014-3718

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/tagm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the 1 find, 2 lib, or 3 sid parameter...

CVE-2014-3719

Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...

CVE-2014-3718

CVE-2014-3718 affects Ex Libris ALEPH 500 (Integrated library management system) where multiple XSS vulnerabilities exist in the CGI script cgi-bin/tag_m.cgi. The affected components are the web interface parameters (1) find, (2) lib, and (3) sid, enabling remote attackers to inject arbitrary web...

Slims CMS Akasia 8.3.1 SQL Injection

Exploit Title : Slims CMS Akasia 8.3.1 Improper Authorization Vulnerability Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/05/2019 Vendor Homepage : slimsetd.id - slims.web.id Software Download Link : slims.web.id/goslims/?wpdmpro=slims-8-3-1-akasia Software...

CVE-2018-18796

Library Management System 1.0 has SQL Injection via the "Search for Books" screen...

CVE-2018-18796

The CVE-2018-18796 entry corresponds to a SQL Injection vulnerability in Library Management System 1.0, exploitable via the frmListBooks/Search for Books path. Public details show the vulnerability arises from unsafe SQL construction in the frmListBooks flow (e.g., textSearch input), with PoC and...

CVE-2018-18796

Library Management System 1.0 has SQL Injection via the "Search for Books" screen...

Library Management System 1.0 - frmListBooks SQL Injection Vulnerability

Exploit for asp platform in category web applications Exploit Title: Library Management System 1.0 - 'frmListBooks' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

Library Management System 1.0 - frmListBooks SQL Injection

Library Management System 1.0 - frmListBooks SQL Injection Exploit Title: Library Management System 1.0 - 'frmListBooks' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

SLiMS 8 Akasia Stock Take Module Cross-Site Scripting Vulnerability

SLiMS 8 Akasia is an open source, free library management system.Stock Take module is one of the book inventory statistics module. A cross-site scripting vulnerability exists in the Stock Take module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...

Library CMS SQL Injection Vulnerability

Library CMS is a management system for corporate and personal use. Library CMS suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary SQL commands...

SLiMS 7 Cendana Cross-Site Scripting Vulnerability

SLiMS 7 Cendana is an open source, free library management system. A cross-site scripting vulnerability exists in versions of SLiMS 7 Cendana prior to 2017-03-16 that stems from the program failing to adequately filter user-submitted data. A remote attacker can exploit the vulnerability to execut...

iLas library management system NTBookRetr. aspx parameters KeyWord SQL injection vulnerability

No description provided by source...

Safety warning: JBoss application platform, the back door leads to about 3 2 0 million Server threats with detection and the use of tools-vulnerability warning-the black bar safety net

The cause of the incident is that the recent ransomware event a large number of diffusion caused by Cisco security researchers noted that, after its security researchers survey analysis found that, among a large number of cases because the attacker uses the JBoss Java application platform...

ILASIII 数字化图书管理系统 RdrRInforDetail.aspx 参数Name SQL注入漏洞

No description provided by source...

某图书检索系统Oracle注射漏洞

简要描述： 详细说明： 北京清大新洋科技有限公司是高新技术企业，公司主要从事图书信息行业应用软件、水利信息化软件、政府信息化管理系统、网络系统集成、工程设计咨询软件等专业行业。 清大新洋人坚信：专业化创新是软件公司发展的基础。凭借在图书馆行业十多年的专业经验和强大的技术积累，每年不断推出通用图书馆集成管理系统GLIS的最新产品。针对中小型用户推出的SQL版6.X和7.X系列以通用性、稳定性、标准性、智能化赢得1600多家各类中小型用户的广泛认可，仅北京西城区就有100多家图书馆选用。 官网部分用户列表展示： SQL Injection: /opac/xskp.jsp?kzh=...

ILAS II Library Management System SQL Injection Vulnerability

Integrated Library Automation System ILAS is the Ministry of Culture in 1988 as a national key scientific and technological projects issued by the Shenzhen Library to undertake and organize the development of a set of libraries at home and abroad to adapt to different levels, a variety of scales,...

Ex Libris Patron Directory Services 2.1 Cross Site Scripting

CVE-2014-7293 Ex Libris Patron Directory Services PDS XSS Cross-Site Scripting Security Vulnerability Exploit Title: Ex Libris Patron Directory Services PDS Logon Page url Parameter XSS Product: Ex Libris Patron Directory Services PDS Vendor: Ex Libris Vulnerable Versions: 2.1 and probability pri...

PMB 4.1.3 Post-Auth SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PMB = 4.1.3 Post-Auth SQL Injection Vulnerability Google Dork: inurl:opaccss Date: 25-12-2014 Exploit Author: XD4rker Ismail Belkacim Email: xd4rkeratgmail.com Twitter: @xd4rker Vendor Homepage: http://www.sigb.net Software Link...