513 matches found
CVE-2024-3359 SourceCodester Online Library System login.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...
CVE-2024-3359 SourceCodester Online Library System login.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...
CVE-2024-3359
CVE-2024-3359 affects SourceCodester Online Library System 1.0. The vulnerability is in the admin/login.php file where the user_email parameter is manipulated, causing a SQL injection due to unsanitized input. Documents indicate the attack is remotely executable and that an exploit has been discl...
Online Library System 跨站脚本漏洞
Online Library System is an open source online library system. A cross-site scripting vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a cross-site scripting vulnerability in the id parameter of the admin/books/index.php file...
Online Library System SQL注入漏洞
Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a SQL injection vulnerability in the category parameter of the admin/books/deweydecimal.php file...
Online Library System SQL注入漏洞
Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a SQL injection vulnerability in the BookPublisher/BookTitle parameter of the admin/borrowed/index.php file...
Online Library System SQL注入漏洞
Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a SQL injection vulnerability in the id parameter of the admin/books/index.php file...
PT-2024-25410 · Sourcecodester · Sourcecodester Online Library System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A vulnerability was found in the processing of the file admin/users/controller.php. The manipulation of the user name argument leads to cross-site scripting. The attack may be...
Online Library System 跨站脚本漏洞
Online Library System is an open source online library system. A cross-site scripting vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a cross-site scripting vulnerability in the username parameter of the admin/users/controller.php file...
PT-2024-25400 · Unknown · Sourcecodester Online Library System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A vulnerability was found in the SourceCodester Online Library System, affecting unknown code of the file admin/books/index.php. The manipulation of the id argument leads to...
PT-2024-25358 · Sourcecodester · Sourcecodester Online Library System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue has been found in the processing of the file admin/login.php, where the manipulation of the user email argument leads to sql injection. The attack can be initiated...
PT-2024-25379 · Unknown · Sourcecodester Online Library System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue was found in the SourceCodester Online Library System, affecting some unknown functionality of the file admin/books/controller.php. The manipulation of the IBSN...
PT-2024-25368 · Unknown · Sourcecodester Online Library System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue was found in the SourceCodester Online Library System, affecting an unknown function of the file admin/books/index.php. The manipulation of the id argument leads t...
CVE-2024-24336
A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...
Koha Library Management System Cross-Site Scripting Vulnerability
Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Individual Developer. A cross-site scripting vulnerability exists in Koha Library Management System version 23.05.05 and earlier, which stems from a cross-site...
CVE-2024-1830
A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...
CVE-2024-1830
A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...
Sql injection
A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...
CVE-2024-1830
CVE-2024-1830 affects code-projects Library System 1.0. The vulnerable component is the file Source/librarian/user/student/lost-password.php, where the manipulation of the email parameter leads to an SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. R...
CVE-2024-1830 code-projects Library System lost-password.php sql injection
A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...