Lucene search
+L

910 matches found

CNNVD
CNNVD
added 2020/12/17 12:0 a.m.9 views

Sourcecodester SourceCodester Online Library Management System SQL注入漏洞

SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A SQL injection vulnerability exists in SourceCodester Online Library Management System 1.0, which allows an attacker to bypass user authentication and emulate...

9.8CVSS7.4AI score0.02773EPSS
SaveExploits2References4
Packet Storm
Packet Storm
added 2020/12/17 12:0 a.m.236 views

Library Management System 1.0 SQL Injection

Exploit Title: Authentication Bypass via SQL injection on Library Management System Date: 23/10/2020 Exploit Author: Valerio Alessandroni Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-f...

0.02773EPSS
SaveExploits2
CNVD
CNVD
added 2020/12/12 12:0 a.m.3 views

Cloud Intelligent Library Management Platform suffers from SQL Injection Vulnerability

Cloud Intelligent Library Management Platform is a new-generation library cluster management platform newly developed according to the current demand for library cluster-type main branch library construction. Cloud Intelligent Library Management Platform has SQL injection vulnerability, which can...

7.8AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2020/12/01 12:0 a.m.19 views

SourceCodester Online Library Management System Command Injection (CVE-2020-28130)

A command injection vulnerability exists in SourceCodester Online Library Management System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS5.7AI score0.06263EPSS
SaveExploits1
NVD
NVD
added 2020/11/17 9:15 p.m.17 views

CVE-2020-28130

An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...

10CVSS9.8AI score0.06263EPSS
SaveExploits1References2
CVE
CVE
added 2020/11/17 8:17 p.m.48 views

CVE-2020-28130

CVE-2020-28130 describes an Arbitrary File Upload in the Upload Image component of SourceCodester Online Library Management System 1.0. The flaw allows an attacker to upload PHP files to admin/borrower/photos (web root) and gain remote code execution via admin/borrower/index.php?view=add. Public ...

10CVSS9.7AI score0.06263EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2020/11/17 12:0 a.m.6 views

SourceCodester Online Library Management System 代码问题漏洞

SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A security vulnerability exists in version 1.0 of the SourceCodester Online Library Management System, which originates from an arbitrary file upload in the uploa...

10CVSS7.8AI score0.06263EPSS
SaveExploits1References3
Fedora
Fedora
added 2020/11/07 1:28 a.m.48 views

[SECURITY] Fedora 31 Update: freetype-2.10.0-4.fc31

The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a...

9.6CVSS7.5AI score0.5063EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2020/10/28 12:0 a.m.332 views

Online Library Management System 1.0 Shell Upload

Exploit Title: Online Library Management System 1.0 - Arbitrary File Upload Date: 22-10-2020 Exploit Author: Jyotsna Adhana Vendor Homepage: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html Software Link:...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2020/09/23 12:0 a.m.6 views

Sourcecodester Simple Library Management System Unrestricted File Upload Vulnerability

Sourcecodester Simple Library Management System is a library management system that helps librarians manage book locations and loan and return records. An unrestricted file upload vulnerability exists in Sourcecodester Simple Library Management System 1.0. The vulnerability can be exploited to...

7.8CVSS7.6AI score0.00504EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/22 6:15 p.m.17 views

CVE-2020-25514

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...

8.4CVSS0.00571EPSS
SaveExploits0References2
NVD
NVD
added 2020/09/22 6:15 p.m.19 views

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

7.8CVSS0.00504EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/22 6:15 p.m.19 views

Information disclosure

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

4.6CVSS7.6AI score0.00504EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2020/09/22 5:55 p.m.21 views

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

7.7AI score0.00504EPSS
SaveExploits0References2
CVE
CVE
added 2020/09/22 5:55 p.m.53 views

CVE-2020-25515

CVE-2020-25515 affects Sourcecodester Simple Library Management System 1.0. The vulnerability is described as insecure permissions via Books > New Book (path: /lms/index.php?page=books). CVSS metrics indicate moderate to high impact (CVSS2 Base 4.6; CVSS3.1 Base 7.8) with local attack vector a...

7.8CVSS7.6AI score0.00504EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/09/22 5:54 p.m.45 views

CVE-2020-25514

CVE-2020-25514 affects Sourcecodester Simple Library Management System 1.0. The vulnerability is an Incorrect Access Control flaw via the login panel at /lms/admin.php, enabling potential bypass of authentication. Public references corroborate an authentication bypass vector and exposure of admin...

8.4CVSS8.3AI score0.00571EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/09/22 5:54 p.m.20 views

CVE-2020-25514

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...

8.4AI score0.00571EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2020/04/21 12:0 a.m.153 views

PMB 5.6 SQL Injection

Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...

0.3AI score
SaveExploits0
zdt
zdt
added 2020/04/16 12:0 a.m.30 views

Xeroneit Library Management System 3.0 - (category) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Xeroneit Library Management System 3.0 - 'category' SQL Injection Google Dork: "LMS v3.0 - Xerone IT " Exploit Author: Sohel Yousef jellyfish security team Software Link:...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/04/15 12:0 a.m.139 views

Xeroneit Library Management System 3.0 - 'category' SQL Injection

Exploit Title: Xeroneit Library Management System 3.0 - 'category' SQL Injection Google Dork: "LMS v3.0 - Xerone IT " Date: 2020-04-09 Exploit Author: Sohel Yousef jellyfish security team Software Link: https://xeroneit.net/portfolio/library-management-system-lms Software Demo...

5.3AI score
SaveExploits0
Rows per page
Query Builder