CVE-2025-7210

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7190

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/studenteditphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2025-7210

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7210

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7210 code-projects/Fabian Ros Library Management System profile_update.php unrestricted upload

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

CVE-2025-7210 code-projects/Fabian Ros Library Management System profile_update.php unrestricted upload

A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profileupdate.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched...

Code-Projects Fabian Ros Library Management System 代码问题漏洞

Code-Projects Fabian Ros Library Management System is an open source library management system from Code-Projects. A code issue vulnerability exists in Code-Projects Fabian Ros Library Management System version 2.0, which originates from an unrestricted upload of the photo parameter in the...

PT-2025-28834 · Code Projects · Fabian Ros Library Management System

Name of the Vulnerable Software and Affected Versions: code-projects/Fabian Ros Library Management System version 2.0 Description: A critical issue was found in the file admin/profile update.php, affecting an unknown functionality. The manipulation of the photo argument leads to unrestricted...

CVE-2025-7190

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/studenteditphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2025-7190

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/studenteditphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2025-7190 code-projects Library Management System student_edit_photo.php unrestricted upload

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/studenteditphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2025-7190 code-projects Library Management System student_edit_photo.php unrestricted upload

A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/studenteditphoto.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

CVE-2025-7190

The CVE-2025-7190 entry concerns code-projects Library Management System 2.0. Concrete details from connected documents show a vulnerability in the file /admin/student_edit_photo.php where manipulating the photo parameter enables unrestricted (arbitrary) file uploads. Exploitation is described as...

PT-2025-28658 · Unknown · Code-Projects Library Management System

Name of the Vulnerable Software and Affected Versions: code-projects Library Management System version 2.0 Description: A critical issue was found in the code-projects Library Management System. This issue affects the file /admin/student edit photo.php, where the manipulation of the photo argumen...

Code-Projects Library Management System 代码问题漏洞

Code-Projects Library Management System is an open source library management system from Code-Projects. A code issue vulnerability exists in Code-Projects Library Management System version 2.0, which stems from improper manipulation of the parameter photo in the file /admin/studenteditphoto.php,...

SIGB PMB SQL注入漏洞

SIGB PMB is an open source integrated library management system from SIGB. A SQL injection vulnerability exists in SIGB PMB versions prior to 8.0.1.2, which stems from vulnerability to SQL injection attacks...

CVE-2025-22980

A SQL Injection vulnerability exists in Senayan Library Management System SLiMS 9 Bulian 9.6.1 via the tempLoanID parameter in the loan form on /admin/modules/circulation/loan.php...

CVE-2024-8297

A vulnerability was found in kitsada8621 Digital Library Management System 1.0. It has been classified as problematic. Affected is the function JwtRefreshAuth of the file middleware/jwtrefreshtokenmiddleware.go. The manipulation of the argument Authorization leads to improper output neutralizatio...

CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

CVE-2024-24337

CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management System version 23.05.05 and earlier allows attackers to to inject DDE commands into csv exports via the 'Budget' and 'Patrons Member' components...