CVE-2022-2214 SourceCodester Library Management System bookdetails.php sql injection

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...

CVE-2022-2214

Overview: CVE-2022-2214 affects the SourceCodester Library Management System 1.0. Vulnerability: SQL injection in the /librarian/bookdetails.php endpoint via the id parameter (e.g., ' AND (SELECT 9198 FROM (SELECT(SLEEP(5)))iqZA)-- PbtB ), allowing remote attacker input to alter SQL logic. Impact...

CVE-2022-2213

The CVE-2022-2213 entry concerns SourceCodester Library Management System 1.0. Affects the admin/edit_admin_details.php?id=admin function, where manipulating the Name parameter enables cross-site scripting (XSS). The vulnerability is exploitable remotely and the exploit has been published publicl...

CVE-2022-2213 SourceCodester Library Management System cross site scripting

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...

CVE-2022-2213 SourceCodester Library Management System cross site scripting

A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...

CVE-2022-2212 SourceCodester Library Management System /card/index.php unrestricted upload

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2022-2212 SourceCodester Library Management System /card/index.php unrestricted upload

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

CVE-2022-2212

CVE-2022-2212 affects SourceCodester Library Management System 1.0, specifically the /card/index.php component. The vulnerability arises from lack of validation of the image parameter during file upload, enabling unrestricted file uploads. This could allow remote attackers to upload malicious fil...

Library Management System 跨站脚本漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System has a cross-site scripting vulnerability that originates in the file /admin/editadmindetails.php?id= The admin's parameter Name lacks a...

Library Management System With QR Code 1.0 SQL Injection Vulnerability

Title: Library Management System with QR code Attendance 1.0 SQL Injection Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...

Library Management System 代码问题漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to file uploads due to a lack of validation of uploaded files in the parameter image in the file /card/index.php. The...

PT-2022-15268 · Sourcecodester · Sourcecodester Library Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Library Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /librarian/bookdetails.php. The issue can be exploited through SQL injection by manipulatin...

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...

CVE-2022-1518

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure...

CVE-2022-28461

mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection...

CVE-2022-28461

mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection...

CVE-2022-28461

mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection...

Sql injection

mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection...

CVE-2022-28461

mingyuefusu Library Management System all versions as of 03-27-2022 is vulnerable to SQL Injection...

mingyuefusu Library Management System SQL注入漏洞

mingyuefusu Library Management System is a library management system. A security vulnerability exists in mingyuefusu Library Management System, which stems from src/javabean/JDBCBean.java not properly pre-processing SQL data...