910 matches found
Sql injection
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /admin/del.php...
Sql injection
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php...
Sql injection
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...
CVE-2022-36657
CVE-2022-36657 affects Library Management System v1.0. The vulnerability is a cross-site scripting (XSS) flaw in the component /librarian/edit_book_details.php. Root cause details are not fully specified in the provided documents. Potential impact is XSS in the user context; no exploitation detai...
CVE-2022-36735
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...
CVE-2022-36735
CVE-2022-36735 affects Library Management System v1.0. A SQL injection vulnerability exists in the /admin/delete.php endpoint via the bookId parameter, enabling attacker-controlled input to influence SQL queries. The CVSSv3.1 impact metrics indicate a CRITICAL severity (9.8) with network attack v...
CVE-2022-36734
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php...
CVE-2022-36734
CVE-2022-36734 affects Library Management System v1.0 via a SQL injection in the RollNo parameter handled by /admin/delstu.php. The NVD entry lists a critical CVSS v3.1 score (9.8) with network attack vector and high impacts on confidentiality, integrity, and availability; no exploitation details...
CVE-2022-36733
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /admin/del.php...
CVE-2022-36733
CVE-2022-36733 affects Library Management System v1.0, with a SQL injection vulnerability exploitable via the M_Id parameter at /admin/del.php. Multiple sources (NVD, Red Hat, PRION/PT-Protection, CNNVD) confirm a high-severity issue (CVSS v3.1: 9.8, network/low complexity, no privileges required...
CVE-2022-36732
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php...
CVE-2022-36732
CVE-2022-36732 affects Library Management System v1.0, with a SQL injection in the id parameter of /librarian/dele.php. The vulnerability is confirmed across multiple sources in the connected set, and the NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no user...
CVE-2022-36731
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php...
CVE-2022-36731
The CVE-2022-36731 entry concerns Library Management System v1.0 with a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php. Affects the library management software’s input handling for RollNo, enabling potentially unauthenticated access to manipulate queries. CVSS 3.1 m...
CVE-2022-36730
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php...
CVE-2022-36730
CVE-2022-36730 affects Library Management System v1.0, with a SQL injection vulnerability in the /librarian/delete.php endpoint exposed via the bookId parameter. The root cause is unsanitized input leading to SQL injection, enabling an attacker to potentially read/modify data or impact availabili...
CVE-2022-36714
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php...
CVE-2022-36714
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php...
