83 matches found
PT-2022-16978
Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical vulnerability has been found in the SourceCodester Library Management System. This issue affects the file lab.php and can be exploited through the manipulation of the...
PT-2022-16982
Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical issue affects the processing of the file /index.php. The manipulation of the argument RollNo with a specific input leads to sql injection. The attack can be initiated...
CVE-2022-2491: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Library Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file lab.php. The manipulation of the argument Section with the input 1' UNION ALL SELECT...
CVE-2022-2213
A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...
CVE-2022-2212
A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...
Sql injection
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...
CVE-2022-2214 SourceCodester Library Management System bookdetails.php sql injection
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...
CVE-2022-2214 SourceCodester Library Management System bookdetails.php sql injection
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...
CVE-2022-2212 SourceCodester Library Management System /card/index.php unrestricted upload
A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...
CVE-2022-2214: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND SELECT 9198 FROM SELECTSLEEP5iqZA-- PbtB...
PT-2022-15255
Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A critical issue was found in the system, affecting an unknown function of the /card/index.php component. The manipulation of the image argument leads to unrestricted upload. Thi...
PT-2022-15265
Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description A vulnerability was found in the system, affecting an unknown functionality of the file "/admin/edit admin details.php?id=admin". The manipulation of the Name argument leads to...
CVE-2022-2213: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/editadmindetails.php?id=admin. The manipulation of the argument Name leads to cross site scripting. The...
CVE-2022-2212: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The...
CVE-2020-28073: Improper Neutralization of Special Elements used in an SQL Command
SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system...
PT-2020-16919
Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0 Description The issue allows an attacker to bypass user authentication and impersonate any user on the system through SQL Injection. Recommendations For SourceCodester Library Management...
SourceCodester Online Library Management System Code Issue Vulnerability
SourceCodester Online Library Management System is an online library management system from SourceCodester, Inc. in the United States. A security vulnerability exists in version 1.0 of the SourceCodester Online Library Management System, which originates from an arbitrary file upload in the uploa...
Design/Logic Flaw
An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...
