541 matches found
SQL Injection Vulnerability in interlib Library Cluster Management System
interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. The...
File Upload Vulnerability in Beijing Milwaukee Technology Company's Document Library System (Open Source Version)
Library system open source version is a document sharing, selling library CMS system . A file upload vulnerability exists in the open-source version of the library system of Beijing MirWeiye Technology Company, which can be exploited by an attacker to upload malicious files to obtain server contr...
CVE-2021-26200
The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user...
CVE-2021-26200
The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user...
Sql injection
The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user...
CVE-2021-26200
The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user...
SourceCodester user area for Library System SQL Injection Vulnerability
SourceCodester user area for Library System is a library management system from SourceCodester, Inc. A SQL injection vulnerability exists in the SourceCodester user area for Library System, which arises from a lack of validation of externally-entered SQL statements in database-based applications...
Library System 1.0 SQL Injection
Exploit Title: Library System 1.0 - 'category' SQL Injection Exploit Author: Aitor Herrero Date: 2021-01-22 Vendor Homepage: https://www.sourcecodester.com/php/12275/library-system-using-php.html Software Link: https://www.sourcecodester.com/php/12275/library-system-using-php.html Version: 1.0...
Library System 1.0 - 'category' SQL Injection
Exploit Title: Library System 1.0 - 'category' SQL Injection Exploit Author: Aitor Herrero Date: 2021-01-22 Vendor Homepage: https://www.sourcecodester.com/php/12275/library-system-using-php.html Software Link: https://www.sourcecodester.com/php/12275/library-system-using-php.html Version: 1.0...
Arbitrary File Download Vulnerability in MTCEO Repository System
MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive information...
SQL Injection Vulnerability in MTCEO Repository System
MTCEO library system using php mysql, by thinkphp to build the bottom layer, Baidu library template style as the basic style. MTCEO library system SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
SourceCodester Online Library Management System Code Issue Vulnerability
SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A security vulnerability exists in version 1.0 of the SourceCodester Online Library Management System, which originates from an arbitrary file upload in the uploa...
CVE-2020-28130
An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...
SQL injection vulnerability in ad***.cl***.php file in the backend of MTCEO repository system
MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system background ad.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...
CVE-2020-25514
Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...
Design/Logic Flaw
Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...
PT-2020-16103
Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Library Management System version 1.0 Description The issue is related to Incorrect Access Control, which can be exploited via the Login Panel. The vulnerable endpoint is "http:///lms/admin.php". Recommendations For...
File Upload Vulnerability in Seven Bears Library System v3.4
Seven bears is similar to Baidu library, can realize the document sharing, selling library CMS system. After the user uploads the source document, seven bears will automatically transcode the document into HTML, after the success of the document HTML back to the library CMS. to realize...
Solis Gnuteca SQL Injection Vulnerability
Solis Gnuteca is a library management system from Solis Brazil. The system includes features such as e-mail alerts, automated inventory, location tracking and user registration. A SQL injection vulnerability exists in Solis Gnuteca version 3.8. The vulnerability stems from a database-based...
SQL Injection Vulnerability in UILAS Library Clustered Regional Consortium Management System (CNVD-2020-31497)
UILAS library cluster regional union management system adopts C/S+B/S mode, C/S mode is mainly for libraries that have high precision requirements for editing, the editing system of C/S mode is mainly for the continuation of the editing module of ILASII and ILASIII system, and further enhancement...