Xeroneit Library Management System 3.1 Cross Site Scripting

Exploit Title: Xeroneit Library Management System 3.1 - "Add Book Category " Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-18 Vendor Homepage: https://xeroneit.net/ Software Link: https://xeroneit.net/portfolio/library-management-system-lms Affected Version: Version 3.1 Tested on: Kali...

Xeroneit Library Management System 3.1 - _Add Book Category _ Stored XSS

Exploit Title: Xeroneit Library Management System 3.1 - "Add Book Category " Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-18 Vendor Homepage: https://xeroneit.net/ Software Link: https://xeroneit.net/portfolio/library-management-system-lms Affected Version: Version 3.1 Tested on: Kali...

Sourcecodester SourceCodester Online Library Management System SQL注入漏洞

SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A SQL injection vulnerability exists in SourceCodester Online Library Management System 1.0, which allows an attacker to bypass user authentication and emulate...

Library Management System 1.0 SQL Injection

Exploit Title: Authentication Bypass via SQL injection on Library Management System Date: 23/10/2020 Exploit Author: Valerio Alessandroni Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-f...

Cloud Intelligent Library Management Platform suffers from SQL Injection Vulnerability

Cloud Intelligent Library Management Platform is a new-generation library cluster management platform newly developed according to the current demand for library cluster-type main branch library construction. Cloud Intelligent Library Management Platform has SQL injection vulnerability, which can...

SourceCodester Online Library Management System Command Injection (CVE-2020-28130)

A command injection vulnerability exists in SourceCodester Online Library Management System. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-28130

An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...

CVE-2020-28130

CVE-2020-28130 describes an Arbitrary File Upload in the Upload Image component of SourceCodester Online Library Management System 1.0. The flaw allows an attacker to upload PHP files to admin/borrower/photos (web root) and gain remote code execution via admin/borrower/index.php?view=add. Public ...

SourceCodester Online Library Management System 代码问题漏洞

SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A security vulnerability exists in version 1.0 of the SourceCodester Online Library Management System, which originates from an arbitrary file upload in the uploa...

[SECURITY] Fedora 31 Update: freetype-2.10.0-4.fc31

The FreeType engine is a free and portable font rendering engine, developed to provide advanced font support for a variety of platforms and environments. FreeType is a library which can open and manages font files as well as efficiently load, hint and render individual glyphs. FreeType is not a...

Online Library Management System 1.0 Shell Upload

Exploit Title: Online Library Management System 1.0 - Arbitrary File Upload Date: 22-10-2020 Exploit Author: Jyotsna Adhana Vendor Homepage: https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html Software Link:...

Sourcecodester Simple Library Management System Unrestricted File Upload Vulnerability

Sourcecodester Simple Library Management System is a library management system that helps librarians manage book locations and loan and return records. An unrestricted file upload vulnerability exists in Sourcecodester Simple Library Management System 1.0. The vulnerability can be exploited to...

CVE-2020-25514

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

Information disclosure

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

CVE-2020-25515

Sourcecodester Simple Library Management System 1.0 is affected by Insecure Permissions via Books New Book , http:///lms/index.php?page=books...

CVE-2020-25515

CVE-2020-25515 affects Sourcecodester Simple Library Management System 1.0. The vulnerability is described as insecure permissions via Books > New Book (path: /lms/index.php?page=books). CVSS metrics indicate moderate to high impact (CVSS2 Base 4.6; CVSS3.1 Base 7.8) with local attack vector a...

CVE-2020-25514

Sourcecodester Simple Library Management System 1.0 is affected by Incorrect Access Control via the Login Panel, http:///lms/admin.php...

CVE-2020-25514

CVE-2020-25514 affects Sourcecodester Simple Library Management System 1.0. The vulnerability is an Incorrect Access Control flaw via the login panel at /lms/admin.php, enabling potential bypass of authentication. Public references corroborate an authentication bypass vector and exposure of admin...

PMB 5.6 SQL Injection

Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...