Lucene search
+L

909 matches found

Packet Storm
Packet Storm
added 2020/12/17 12:0 a.m.236 views

Library Management System 1.0 SQL Injection

Exploit Title: Authentication Bypass via SQL injection on Library Management System Date: 23/10/2020 Exploit Author: Valerio Alessandroni Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-f...

0.02773EPSS
Exploits2
CNVD
CNVD
added 2020/12/12 12:0 a.m.2 views

Cloud Intelligent Library Management Platform suffers from SQL Injection Vulnerability

Cloud Intelligent Library Management Platform is a new-generation library cluster management platform newly developed according to the current demand for library cluster-type main branch library construction. Cloud Intelligent Library Management Platform has SQL injection vulnerability, which can...

7.8AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2020/12/01 12:0 a.m.19 views

SourceCodester Online Library Management System Command Injection (CVE-2020-28130)

A command injection vulnerability exists in SourceCodester Online Library Management System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

10CVSS5.7AI score0.06263EPSS
Exploits1
NVD
NVD
added 2020/11/17 9:15 p.m.17 views

CVE-2020-28130

An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...

10CVSS9.8AI score0.06263EPSS
Exploits1References2
CVE
CVE
added 2020/11/17 8:17 p.m.48 views

CVE-2020-28130

CVE-2020-28130 describes an Arbitrary File Upload in the Upload Image component of SourceCodester Online Library Management System 1.0. The flaw allows an attacker to upload PHP files to admin/borrower/photos (web root) and gain remote code execution via admin/borrower/index.php?view=add. Public ...

10CVSS9.7AI score0.06263EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2020/11/17 12:0 a.m.6 views

SourceCodester Online Library Management System 代码问题漏洞

SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A security vulnerability exists in version 1.0 of the SourceCodester Online Library Management System, which originates from an arbitrary file upload in the uploa...

10CVSS7.8AI score0.06263EPSS
Exploits1References3
Fedora
Fedora
added 2020/11/07 1:28 a.m.45 views

[SECURITY] Fedora 31 Update: freetype-2.10.0-4.fc31

The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a...

9.6CVSS7.5AI score0.5063EPSS
Exploits2
Packet Storm
Packet Storm
added 2020/10/28 12:0 a.m.331 views

Online Library Management System 1.0 Shell Upload

Exploit Title: Online Library Management System 1.0 - Arbitrary File Upload Date: 22-10-2020 Exploit Author: Jyotsna Adhana Vendor Homepage: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html Software Link:...

7.4AI score
Exploits0
CNVD
CNVD
added 2020/09/23 12:0 a.m.6 views

Sourcecodester Simple Library Management System Unrestricted File Upload Vulnerability

Sourcecodester Simple Library Management System is a library management system that helps librarians manage book locations and loan and return records. An unrestricted file upload vulnerability exists in Sourcecodester Simple Library Management System 1.0. The vulnerability can be exploited to...

7.8CVSS7.6AI score0.00504EPSS
Exploits0References1
NVD
NVD
added 2020/09/22 6:15 p.m.16 views

CVE-2020-25514

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...

8.4CVSS0.00571EPSS
Exploits0References2
NVD
NVD
added 2020/09/22 6:15 p.m.18 views

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

7.8CVSS0.00504EPSS
Exploits0References2
Prion
Prion
added 2020/09/22 6:15 p.m.17 views

Information disclosure

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

4.6CVSS7.6AI score0.00504EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2020/09/22 5:55 p.m.52 views

CVE-2020-25515

CVE-2020-25515 affects Sourcecodester Simple Library Management System 1.0. The vulnerability is described as insecure permissions via Books > New Book (path: /lms/index.php?page=books). CVSS metrics indicate moderate to high impact (CVSS2 Base 4.6; CVSS3.1 Base 7.8) with local attack vector a...

7.8CVSS7.6AI score0.00504EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/09/22 5:55 p.m.20 views

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

7.7AI score0.00504EPSS
Exploits0References2
CVE
CVE
added 2020/09/22 5:54 p.m.44 views

CVE-2020-25514

CVE-2020-25514 affects Sourcecodester Simple Library Management System 1.0. The vulnerability is an Incorrect Access Control flaw via the login panel at /lms/admin.php, enabling potential bypass of authentication. Public references corroborate an authentication bypass vector and exposure of admin...

8.4CVSS8.3AI score0.00571EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/09/22 5:54 p.m.19 views

CVE-2020-25514

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...

8.4AI score0.00571EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2020/04/21 12:0 a.m.153 views

PMB 5.6 SQL Injection

Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...

0.3AI score
Exploits0
0day.today
0day.today
added 2020/04/16 12:0 a.m.29 views

Xeroneit Library Management System 3.0 - (category) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Xeroneit Library Management System 3.0 - 'category' SQL Injection Google Dork: "LMS v3.0 - Xerone IT " Exploit Author: Sohel Yousef jellyfish security team Software Link:...

0.4AI score
Exploits0
Exploit DB
Exploit DB
added 2020/04/15 12:0 a.m.138 views

Xeroneit Library Management System 3.0 - 'category' SQL Injection

Exploit Title: Xeroneit Library Management System 3.0 - 'category' SQL Injection Google Dork: "LMS v3.0 - Xerone IT " Date: 2020-04-09 Exploit Author: Sohel Yousef jellyfish security team Software Link: https://xeroneit.net/portfolio/library-management-system-lms Software Demo...

7.4AI score
Exploits0
0day.today
0day.today
added 2020/04/11 12:0 a.m.21 views

Xeroneit Library Management System 3.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Xeroneit Library Management System SQLI Google Dork: "LMS v3.0 - Xerone IT " Exploit Author: Sohel Yousef jellyfish security team Software Link: https://xeroneit.net/portfolio/library-management-system-lms Software Demo...

0.4AI score
Exploits0
Rows per page
Query Builder