1041 matches found
CVE-2020-28073
SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system...
CVE-2020-28073
CVE-2020-28073 affects SourceCodester Library Management System 1.0. The vulnerability is a SQL injection in the login/authentication flow that allows an attacker to bypass authentication and impersonate any user. The attack is demonstrated in public references (e.g., PacketStorm) with a repro sh...
CVE-2020-28073: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system...
Library Management System 3.0 Cross Site Scripting
Exploit Title: Library Management System 3.0 - "Add Category" Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-22 Google Dork: N/A Vendor Homepage: https://otsglobal.org/ Software Link: https://codecanyon.net/item/library-management-system-22/16965307 Affected Version: 3.0 Patched Version:...
Xeroneit Library Management System 3.1 Cross Site Scripting
Exploit Title: Xeroneit Library Management System 3.1 - "Add Book Category " Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-18 Vendor Homepage: https://xeroneit.net/ Software Link: https://xeroneit.net/portfolio/library-management-system-lms Affected Version: Version 3.1 Tested on: Kali...
Xeroneit Library Management System 3.1 - _Add Book Category _ Stored XSS
Exploit Title: Xeroneit Library Management System 3.1 - "Add Book Category " Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-18 Vendor Homepage: https://xeroneit.net/ Software Link: https://xeroneit.net/portfolio/library-management-system-lms Affected Version: Version 3.1 Tested on: Kali...
Sourcecodester SourceCodester Online Library Management System SQL注入漏洞
SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A SQL injection vulnerability exists in SourceCodester Online Library Management System 1.0, which allows an attacker to bypass user authentication and emulate...
Library Management System 1.0 SQL Injection
Exploit Title: Authentication Bypass via SQL injection on Library Management System Date: 23/10/2020 Exploit Author: Valerio Alessandroni Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-f...
Cloud Intelligent Library Management Platform suffers from SQL Injection Vulnerability
Cloud Intelligent Library Management Platform is a new-generation library cluster management platform newly developed according to the current demand for library cluster-type main branch library construction. Cloud Intelligent Library Management Platform has SQL injection vulnerability, which can...
SourceCodester Online Library Management System Command Injection (CVE-2020-28130)
A command injection vulnerability exists in SourceCodester Online Library Management System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
CVE-2020-28130
An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...
CVE-2020-28130
CVE-2020-28130 describes an Arbitrary File Upload in the Upload Image component of SourceCodester Online Library Management System 1.0. The flaw allows an attacker to upload PHP files to admin/borrower/photos (web root) and gain remote code execution via admin/borrower/index.php?view=add. Public ...
SourceCodester Online Library Management System 代码问题漏洞
SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A security vulnerability exists in version 1.0 of the SourceCodester Online Library Management System, which originates from an arbitrary file upload in the uploa...
CVE-2020-28130: Unrestricted Upload of File with Dangerous Type
An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...
[SECURITY] Fedora 31 Update: freetype-2.10.0-4.fc31
The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a...
Online Library Management System 1.0 Shell Upload
Exploit Title: Online Library Management System 1.0 - Arbitrary File Upload Date: 22-10-2020 Exploit Author: Jyotsna Adhana Vendor Homepage: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html Software Link:...
Sourcecodester Simple Library Management System Unrestricted File Upload Vulnerability
Sourcecodester Simple Library Management System is a library management system that helps librarians manage book locations and loan and return records. An unrestricted file upload vulnerability exists in Sourcecodester Simple Library Management System 1.0. The vulnerability can be exploited to...
CVE-2020-25514
Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...
