Lucene search
K

509 matches found

CNNVD
CNNVD
added 2024/04/06 12:0 a.m.1 views

Online Library System SQL注入漏洞

Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a SQL injection vulnerability in the BookPublisher/BookTitle parameter of the admin/borrowed/index.php file...

9.8CVSS7.9AI score0.00053EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/04/06 12:0 a.m.1 views

Online Library System 跨站脚本漏洞

Online Library System is an open source online library system. A cross-site scripting vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a cross-site scripting vulnerability in the id parameter of the admin/books/index.php file...

5.4CVSS4.5AI score0.0007EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/04/06 12:0 a.m.1 views

Online Library System SQL注入漏洞

Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a SQL injection vulnerability in the id parameter of the admin/books/index.php file...

9.8CVSS7.9AI score0.00182EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/04/06 12:0 a.m.3 views

PT-2024-25410 · Sourcecodester · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A vulnerability was found in the processing of the file admin/users/controller.php. The manipulation of the user name argument leads to cross-site scripting. The attack may be...

5.4CVSS4.2AI score0.0007EPSS
Exploits1References9
CNNVD
CNNVD
added 2024/04/06 12:0 a.m.3 views

Online Library System 跨站脚本漏洞

Online Library System is an open source online library system. A cross-site scripting vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a cross-site scripting vulnerability in the username parameter of the admin/users/controller.php file...

5.4CVSS4.5AI score0.0007EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/04/06 12:0 a.m.2 views

PT-2024-25400 · Unknown · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A vulnerability was found in the SourceCodester Online Library System, affecting unknown code of the file admin/books/index.php. The manipulation of the id argument leads to...

5.4CVSS4.4AI score0.0007EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2024/04/05 12:0 a.m.2 views

PT-2024-25358 · Sourcecodester · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue has been found in the processing of the file admin/login.php, where the manipulation of the user email argument leads to sql injection. The attack can be initiated...

9.8CVSS7.7AI score0.00182EPSS
Exploits1References8
Positive Technologies
Positive Technologies
added 2024/04/05 12:0 a.m.2 views

PT-2024-25379 · Unknown · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue was found in the SourceCodester Online Library System, affecting some unknown functionality of the file admin/books/controller.php. The manipulation of the IBSN...

8.8CVSS7.9AI score0.00053EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2024/04/05 12:0 a.m.2 views

PT-2024-25368 · Unknown · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue was found in the SourceCodester Online Library System, affecting an unknown function of the file admin/books/index.php. The manipulation of the id argument leads t...

9.8CVSS7.8AI score0.00182EPSS
Exploits1References9
NVD
NVD
added 2024/03/19 9:15 p.m.9 views

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...

8.1CVSS5.8AI score0.00237EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.3 views

Koha Library Management System Cross-Site Scripting Vulnerability

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Individual Developer. A cross-site scripting vulnerability exists in Koha Library Management System version 23.05.05 and earlier, which stems from a cross-site...

8.1CVSS6.3AI score0.00237EPSS
Exploits0References4
OSV
OSV
added 2024/02/23 7:15 p.m.1 views

CVE-2024-1830

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

9.8CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2024/02/23 7:15 p.m.9 views

CVE-2024-1830

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

9.8CVSS7.5AI score0.00085EPSS
Exploits1References3
Prion
Prion
added 2024/02/23 7:15 p.m.13 views

Sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

7.5CVSS7.6AI score0.00085EPSS
Exploits1References3
CVE
CVE
added 2024/02/23 6:31 p.m.98 views

CVE-2024-1830

CVE-2024-1830 affects code-projects Library System 1.0. The vulnerable component is the file Source/librarian/user/student/lost-password.php, where the manipulation of the email parameter leads to an SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. R...

9.8CVSS7.4AI score0.00085EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2024/02/23 6:31 p.m.15 views

CVE-2024-1830 code-projects Library System lost-password.php sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

7.5CVSS7.7AI score0.00085EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2024/02/23 6:31 p.m.11 views

CVE-2024-1830 code-projects Library System lost-password.php sql injection

A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched...

7.5CVSS7.3AI score0.00085EPSS
Exploits1References3
OSV
OSV
added 2024/02/23 6:15 p.m.2 views

CVE-2024-1829

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...

9.8CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2024/02/23 6:15 p.m.11 views

CVE-2024-1827

A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file Source/librarian/user/teacher/login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely...

9.8CVSS7.5AI score0.00044EPSS
Exploits1References3
NVD
NVD
added 2024/02/23 6:15 p.m.8 views

CVE-2024-1829

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injectio...

9.8CVSS7.5AI score0.00087EPSS
Exploits1References3
Rows per page
Query Builder