1043 matches found
Sql injection
In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...
Library Management System SQL注入漏洞
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in the idno parameter of the /card/in-card.php file in version 1.0 of the Library Management System, which c...
CVE-2022-38291: Improper Neutralization of Input During Web Page Generation
SLiMS Senayan Library Management System v9.4.2 was discovered to contain a cross-site scripting XSS vulnerability via the Search function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search bar...
CVE-2022-38292: Server-Side Request Forgery (SSRF)
SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php...
PT-2022-24344 · Unknown · Slims Senayan Library Management System
Name of the Vulnerable Software and Affected Versions: SLiMS Senayan Library Management System version 9.4.2 Description: The issue concerns multiple Server-Side Request Forgeries in the SLiMS Senayan Library Management System. The components /bibliography/marcsru.php and /bibliography/z3950sru.p...
PT-2022-24343 · Unknown · Slims Senayan Library Management System
Name of the Vulnerable Software and Affected Versions: SLiMS Senayan Library Management System version 9.4.2 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function. This enables the execution of malicious code on th...
CVE-2022-37794
CVE-2022-37794 affects Library Management System 1.0. The /card/in-card.php endpoint with the id_no parameter is vulnerable to SQL injection due to unsafeguarded input handling, enabling potential impact to confidentiality, integrity, and availability (per NVD: CVSS 3.1 base score 9.8). No remedi...
CVE-2022-37794
In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...
PT-2022-24073 · Unknown · Library Management System
Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue concerns SQL injection vulnerability in the /card/in-card.php file, specifically affecting the id no parameters. This allows for potential exploitation by injecting malicious SQL...
CVE-2022-37794: Improper Neutralization of Special Elements used in an SQL Command
In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...
CVE-2022-36734
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php...
CVE-2022-36731
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php...
CVE-2022-36735
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...
CVE-2022-36731
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php...
CVE-2022-36735
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...
CVE-2022-36735
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...
CVE-2022-36732
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php...
CVE-2022-36734
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php...