CVE-2024-40402

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries...

CVE-2024-40402

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries...

PT-2024-28829 · Unknown · Sourcecodester Library Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Library Management System version 1.0 Description: A SQL injection issue was discovered due to insufficient validation of user input for the username parameter in the "ajax.php" file. This allows attackers to inject...

CVE-2024-40402: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries...

CVE-2024-40402

A SQL injection vulnerability exists in the ajax.php file of Sourcecodester Simple Library Management System 1.0 . The root cause is insufficient validation of the username parameter, which enables attackers to inject malicious SQL queries. As a temporary workaround, it is recommended to restrict...

CVE-2024-40394

Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the component ajax.php...

CVE-2024-40394

Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the component ajax.php...

PT-2024-28826 · Unknown · Simple Library Management System Project Using Php/Mysql

Name of the Vulnerable Software and Affected Versions: Simple Library Management System Project Using PHP/MySQL version 1.0 Description: The issue is related to an arbitrary file upload vulnerability. This vulnerability is present in the ajax.php component. Recommendations: For version 1.0,...

CVE-2024-40394

Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the component ajax.php...

CVE-2024-40394: Unrestricted Upload of File with Dangerous Type

Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the component ajax.php...

CVE-2024-40394

The Simple Library Management System Project Using PHP/MySQL v1.0 is affected by an arbitrary file upload vulnerability located in the ajax.php component. This flaw allows for the unrestricted upload of files with dangerous types, potentially leading to high impact on confidentiality, integrity, ...

CVE-2024-31586

A Cross Site Scripting XSS vulnerability exists in Computer Laboratory Management System version 1.0. This vulnerability allows a remote attacker to execute arbitrary code via the Borrower Name, Department, and Remarks parameters...

CVE-2024-35581

A cross-site scripting XSS vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Borrower Name input field...

CVE-2024-33305

SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting XSS via "Middle Name" parameter in Create User...

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

CVE-2024-24336

The Koha Library Management System (version 23.05.05 and earlier) is affected by a multiple Cross-site scripting (XSS) vulnerability within the '/members/moremember.pl' and ‘/members/members-home.pl’ endpoints. This flaw allows malicious staff users to perform Cross-site Request Forgery (CSRF) at...

CVE-2024-24336: Cross-Site Request Forgery (CSRF)

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

CVE-2023-7109

A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2023-7110

A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit ha...