CVE-2025-52360

A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05 . The root cause is the failure to sanitize input entered into the search field, which is subsequently reflected in the search history interface . This allows for the execution of...

CVE-2025-52360

A Cross-Site Scripting XSS vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user...

PT-2025-30837 · Koha · Library Management System

Name of the Vulnerable Software and Affected Versions: Koha Library Management System version 24.05 Description: A Cross-Site Scripting XSS vulnerability exists in the OPAC search feature. Unsanitized input entered in the search field is reflected in the search history interface, leading to the...

CVE-2025-52360: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user...

Online Library Management System Cross-Site Scripting Vulnerability

Online Library Management System is an online library management system. Online Library Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter stdid in the file...

CVE-2025-7601

A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated...

CVE-2025-7600

A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-7601

A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated...

CVE-2025-7600 PHPGurukul Online Library Management System student-history.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-7600

Summary (concrete details): PHPGurukul Online Library Management System 3.0 contains a SQL injection in the admin-side file /admin/student-history.php via the vulnerable parameter stdid . The issue arises from unsanitized user input, enabling remote exploitation and data theft. Multiple sources c...

PT-2025-29457 · Phpgurukul · Phpgurukul Online Library Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: A cross-site scripting issue exists in PHPGurukul Online Library Management System 3.0. The vulnerability is located in the /admin/student-history.php file. Manipulation of...

CVE-2025-7601: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated...

CVE-2025-7600: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-7210

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7190

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/studenteditphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2025-7210

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7210

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7210 code-projects/Fabian Ros Library Management System profile_update.php unrestricted upload

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7210 code-projects/Fabian Ros Library Management System profile_update.php unrestricted upload

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

PT-2025-28834 · Code Projects · Fabian Ros Library Management System

Name of the Vulnerable Software and Affected Versions: code-projects/Fabian Ros Library Management System version 2.0 Description: A critical issue was found in the file admin/profile update.php, affecting an unknown functionality. The manipulation of the photo argument leads to unrestricted...