SQL Injection Vulnerability in UILAS Library Clustered Regional Consortium Management System (CNVD-2020-31497)

UILAS library cluster regional union management system adopts C/S+B/S mode, C/S mode is mainly for libraries that have high precision requirements for editing, the editing system of C/S mode is mainly for the continuation of the editing module of ILASII and ILASIII system, and further enhancement...

SQL Injection Vulnerability in Seven Bears Library System v3.4

Seven bears is similar to Baidu library, can realize the document sharing, selling library CMS system. After the user uploads the source document, seven bears will automatically transcode the document into HTML, after the success of the document HTML back to the library CMS. to realize...

SQL injection vulnerability in the ne***.cl***.php file of the Seven Bears library system

Seven bears library system a similar Baidu library online document preview, selling system. A SQL injection vulnerability exists in the ne.cl.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

File Upload Vulnerability in Chinese Online Digital Library System v6.4.6.3

Chinese Online Digital Library is a digital library program under Chinese Online, serving institutional users, helping to establish a wall-less, low-cost, healthy and legal knowledge center, improving library services and speeding up information construction. A file upload vulnerability exists in...

CVE-2018-1000670

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Scripting XSS vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=number ,...

Cross site request forgery (csrf)

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Request Forgery CSRF vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments a...

CVE-2018-1000669

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Request Forgery CSRF vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments a...

CVE-2018-1000670

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Scripting XSS vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=number ,...

CVE-2018-1000669

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Request Forgery CSRF vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments a...

Cross site scripting

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Scripting XSS vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=number ,...

CVE-2018-1000670

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Scripting XSS vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=number ,...

CVE-2018-1000669

CVE-2018-1000669 | KOHA Library System contains a CSRF vulnerability in /cgi-bin/koha/members/paycollect.pl affecting borrowernumber, amount, amountoutstanding, and paid. An attacker can result in marking payments as paid for certain users on behalf of Administrators, via a socially engineered li...

CVE-2018-1000669

KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Request Forgery CSRF vulnerability in /cgi-bin/koha/members/paycollect.pl Parameters affected: borrowernumber, amount, amountoutstanding, paid that can result in Attackers can mark payments a...

CVE-2018-1000670

KOHA Library System versions 16.11.x (up to 16.11.13) and 17.05.x (up to 17.05.05) are affected by a Cross Site Scripting (XSS) vulnerability in multiple fields across several pages (e.g., /cgi-bin/koha/acqui/supplier.pl?op=enter, /cgi-bin/koha/circ/circulation.pl?borrowernumber=[number], /cgi-bi...

Evergreen Information Disclosure Vulnerability

Evergreen is an open source, highly scalable library system ILS developed by the Evergreen community. The system helps patrons find library materials and helps with library management, organizing catalogs, and distributing those materials, among other things. A security vulnerability exists in th...

events.carr.org XSS vulnerability

Vulnerable URL: http://events.carr.org/allegany/evanced/roomrequest.asp?AllRoomsCheck==1=Allegany%20County%20Library%20System%20Room%20Request=1/-///'/"//--...

SQL injection vulnerability in zylr.jsp page kzh parameter of Beijing Tsinghua University Xinyang book retrieval system

The library system of Beijing Qingda Xinyang Technology Co., Ltd. is a set of library comprehensive business management network platform under the open Web platform using object-oriented programming technology, advanced technology, easy to share resources and remote maintenance. The product has a...

SQL injection vulnerability in the nRecno parameter of the GetRegistInfoAjax.aspx page of the ilas online library system of Shenzhen Ketu Automation New Technology Application Co.

Integrated Library Automation System ILAS is the Ministry of Culture in 1988 as a national key scientific and technological projects issued by the Shenzhen Library to undertake and organize the development of a set of libraries at home and abroad to adapt to different levels, a variety of scales,...

Authentication Bypass Vulnerability in the Library System of Beijing Dingfeng Jinye Technology Co.

Ltd. library system is widely used in various enterprises and institutions, schools and universities and other libraries. It mainly includes several modules such as system management, system query, system setting, printing, borrowing and returning books. There is an authentication bypass...

SQL injection vulnerability in the library system bookinfo.aspx?id= parameter of Beijing Dingfeng Jinye Technology Co.

Ltd. library system is widely used in various enterprises and institutions, schools and universities and other libraries. It mainly includes several modules such as system management, system query, system setting, printing, borrowing and returning books. There is a SQL injection vulnerability in...