840 matches found
CVE-2020-25515: Unrestricted Upload of File with Dangerous Type
Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:// /lms/index.php?page=books...
PMB 5.6 SQL Injection
Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...
Xeroneit Library Management System 3.0 - (category) SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Xeroneit Library Management System 3.0 - 'category' SQL Injection Google Dork: "LMS v3.0 - Xerone IT " Exploit Author: Sohel Yousef jellyfish security team Software Link:...
Xeroneit Library Management System 3.0 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Xeroneit Library Management System SQLI Google Dork: "LMS v3.0 - Xerone IT " Exploit Author: Sohel Yousef jellyfish security team Software Link: https://xeroneit.net/portfolio/library-management-system-lms Software Demo...
Xeroneit Library Management System 3.0 SQL Injection
-- Exploit Title: Xeroneit Library Management System SQLI Google Dork: "LMS v3.0 - Xerone IT " Date: 09/04/2020 Exploit Author: Sohel Yousef jellyfish security team Software Link: https://xeroneit.net/portfolio/library-management-system-lms Software Demo :https://xeroneit.co/demo/lms/home/login...
CVE-2014-3718
Multiple cross-site scripting XSS vulnerabilities in cgi-bin/tagm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the 1 find, 2 lib, or 3 sid parameter...
CVE-2014-3719
Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...
CVE-2014-3718
CVE-2014-3718 affects Ex Libris ALEPH 500 (Integrated library management system) where multiple XSS vulnerabilities exist in the CGI script cgi-bin/tag_m.cgi. The affected components are the web interface parameters (1) find, (2) lib, and (3) sid, enabling remote attackers to inject arbitrary web...
Slims CMS Akasia 8.3.1 SQL Injection
Exploit Title : Slims CMS Akasia 8.3.1 Improper Authorization Vulnerability Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 20/05/2019 Vendor Homepage : slimsetd.id - slims.web.id Software Download Link : slims.web.id/goslims/?wpdmpro=slims-8-3-1-akasia Software...
CVE-2018-18796
Library Management System 1.0 has SQL Injection via the "Search for Books" screen...
CVE-2018-18796
The CVE-2018-18796 entry corresponds to a SQL Injection vulnerability in Library Management System 1.0, exploitable via the frmListBooks/Search for Books path. Public details show the vulnerability arises from unsafe SQL construction in the frmListBooks flow (e.g., textSearch input), with PoC and...
CVE-2018-18796
Library Management System 1.0 has SQL Injection via the "Search for Books" screen...
PT-2018-14660
Name of the Vulnerable Software and Affected Versions Library Management System version 1.0 Description The issue is related to SQL Injection, which occurs via the "Search for Books" screen. Recommendations For Library Management System version 1.0, consider restricting access to the "Search for...
CVE-2018-18796: Improper Neutralization of Special Elements used in an SQL Command
Library Management System 1.0 has SQL Injection via the "Search for Books" screen...
Library Management System 1.0 - frmListBooks SQL Injection Vulnerability
Exploit for asp platform in category web applications Exploit Title: Library Management System 1.0 - 'frmListBooks' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...
Library Management System 1.0 - frmListBooks SQL Injection
Library Management System 1.0 - frmListBooks SQL Injection Exploit Title: Library Management System 1.0 - 'frmListBooks' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...
SLiMS 8 Akasia Stock Take Module Cross-Site Scripting Vulnerability
SLiMS 8 Akasia is an open source, free library management system.Stock Take module is one of the book inventory statistics module. A cross-site scripting vulnerability exists in the Stock Take module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...
Library CMS SQL Injection Vulnerability
Library CMS is a management system for corporate and personal use. Library CMS suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary SQL commands...
SLiMS 7 Cendana Cross-Site Scripting Vulnerability
SLiMS 7 Cendana is an open source, free library management system. A cross-site scripting vulnerability exists in versions of SLiMS 7 Cendana prior to 2017-03-16 that stems from the program failing to adequately filter user-submitted data. A remote attacker can exploit the vulnerability to execut...
