Lucene search
K

61 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:38 p.m.4 views

CVE-2022-2774

A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is th...

9.8CVSS7.6AI score0.0031EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:38 p.m.5 views

CVE-2022-2768

A vulnerability classified as problematic was found in SourceCodester Library Management System. This vulnerability affects unknown code of the file /qr/I/. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The identifier of this...

6.1CVSS6.5AI score0.00224EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:24 p.m.4 views

CVE-2022-2212

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...

8.8CVSS6.9AI score0.00376EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:55 p.m.4 views

CVE-2022-2214

A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...

8.8CVSS7.2AI score0.00365EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:54 p.m.4 views

CVE-2022-2492

A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND SELECT 2625 FROM SELECTSLEEP5MdIL AND 'KXmq'='KXmq=1231312312...

8.8CVSS7.4AI score0.00245EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/05/10 2:31 p.m.8 views

CVE-2025-4504 SourceCodester Online College Library System index.php sql injection

A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

7.5CVSS7.5AI score0.00204EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/05/10 12:0 a.m.9 views

SourceCodester Online College Library System 注入漏洞

SourceCodester Online College Library System is SourceCodester open source an online college library system. SourceCodester Online College Library System version 1.0 has an injection vulnerability, the vulnerability stems from the wrong operation of the parameter Category in the file /index.php...

9.8CVSS7.9AI score0.00204EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/05/10 12:0 a.m.3 views

PT-2025-20630 · Unknown · Sourcecodester Online College Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online College Library System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online College Library System. The issue is related to an unknown function of the file /index.php, where the...

9.8CVSS7.5AI score0.00204EPSS
Exploits1References13
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.2 views

CASAP Automated Enrollment 安全漏洞

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of this project is to provide an automated enrollment system for CASAP to streamline the process for schools and make it more effective, efficient, and easily retrievable. A...

9.8CVSS7.5AI score0.00769EPSS
Exploits0References4
OSV
OSV
added 2024/04/06 9:15 a.m.2 views

CVE-2024-3364

A vulnerability was found in SourceCodester Online Library System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file admin/books/index.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The explo...

5.4CVSS3.7AI score0.0007EPSS
Exploits1References4
OSV
OSV
added 2024/04/06 9:15 a.m.1 views

CVE-2024-3363

A vulnerability was found in SourceCodester Online Library System 1.0. It has been classified as critical. This affects an unknown part of the file admin/borrowed/index.php. The manipulation of the argument BookPublisher/BookTitle leads to sql injection. It is possible to initiate the attack...

9.8CVSS6.8AI score
Exploits0References4
OSV
OSV
added 2024/04/06 6:15 a.m.2 views

CVE-2024-3361

A vulnerability has been found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/books/deweydecimal.php. The manipulation of the argument category leads to sql injection. The attack can be launched...

8.8CVSS5.7AI score
Exploits0References4
OSV
OSV
added 2024/04/06 4:15 a.m.1 views

CVE-2024-3359

A vulnerability, which was classified as critical, has been found in SourceCodester Online Library System 1.0. This issue affects some unknown processing of the file admin/login.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.7AI score0.00182EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/04/06 12:0 a.m.4 views

Online Library System SQL注入漏洞

Online Library System is an open source online library system. A SQL injection vulnerability exists in SourceCodester Online Library System version 1.0, which originates from a SQL injection vulnerability in the category parameter of the admin/books/deweydecimal.php file...

8.8CVSS7.9AI score0.00053EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/04/06 12:0 a.m.3 views

PT-2024-25410 · Sourcecodester · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A vulnerability was found in the processing of the file admin/users/controller.php. The manipulation of the user name argument leads to cross-site scripting. The attack may be...

5.4CVSS4.2AI score0.0007EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2024/04/05 12:0 a.m.3 views

PT-2024-25374 · Sourcecodester · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Online Library System. The issue affects an unknown functionality of the file admin/books/deweydecimal.php. The...

8.8CVSS7.9AI score0.00053EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2024/04/05 12:0 a.m.3 views

PT-2024-25379 · Unknown · Sourcecodester Online Library System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Library System version 1.0 Description: A critical issue was found in the SourceCodester Online Library System, affecting some unknown functionality of the file admin/books/controller.php. The manipulation of the IBSN...

8.8CVSS7.9AI score0.00053EPSS
Exploits1References9
NVD
NVD
added 2023/10/14 12:15 p.m.14 views

CVE-2023-5580

A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS7.4AI score0.00053EPSS
Exploits1References3
Prion
Prion
added 2023/10/14 12:15 p.m.23 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Library System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

6.5CVSS9.7AI score0.00053EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/10/14 12:0 p.m.71 views

CVE-2023-5580

The CVE-2023-5580 entry corresponds to a SQL injection vulnerability in SourceCodester Library System 1.0, specifically affecting the index.php file via manipulating the category argument. The root cause is improper input handling leading to SQL injection that can be triggered remotely. Documente...

9.8CVSS7.4AI score0.00053EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder