29 matches found
CVE-2023-34632
CVE-2023-34632 Reflected XSS in 1000projects Book Management System 1.0 CVE-2023-34632 Reflected Cross-Site Scripting XSS in 1000projects Book Management System 1.0 Description A Reflected Cross-Site Scripting XSS vulnerability was discovered in 1000projects Book Management System version 1.0. Th...
CVE-2026-71241 Book-Management-System - Unauthenticated Disclosure of Student PII and Borrowing History
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
CVE-2026-71241
CVE-2026-71241 affects a Book-Management-System built with Flask. Several endpoints (/student, /record, /books, /find_stu_book, /find_not_return_book) are missing the @login_required decorator that protects related routes (/search_student, /storage). This misconfiguration allows any unauthenticat...
CVE-2026-71241: Missing Authentication for Critical Function
Book-Management-System's Flask API endpoints /student, /record, /books, /findstubook, and /findnotreturnbook are missing the @loginrequired decorator that protects sibling routes /searchstudent, /storage in the same file. Because cardid values are sequential integers, the entire student database...
PT-2026-68107
Name of the Vulnerable Software and Affected Versions Book-Management-System affected versions not specified Description Certain Flask API endpoints lack the @login required decorator, which is used to restrict access to authenticated users. This flaw allows unauthenticated remote users to retrie...
Exploit for CVE-2023-34632
CVE-2023-346...
EUVD-2018-10103
Malware in sbrugna...
EUVD-2022-43196
Malicious code in bioql PyPI...
CVE-2022-3856
The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...
CVE-2025-2831 mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 bookList getBookList sql injection
A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as critical. This vulnerability affects the function getBookList of the file /admin/bookList?page=1&limit=10. The manipulation of the argument condition leads ...
Tushuguanlixitong security vulnerabilities
tushuguanlixitong book management system is a book management system by the individual developer of China Mingyuefusu 明月复苏. A security vulnerability exists in tushuguanlixitong, which stems from certain unknown processing that could lead to cross-site request forgery...
Tushuguanlixitong security vulnerabilities
tushuguanlixitong book management system is a book management system by the individual developer of China Mingyuefusu 明月复苏. A security vulnerability exists in tushuguanlixitong, which stems from an incorrect manipulation of the parameter condition that can lead to SQL injection...
CVE-2022-3856
The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...
CVE-2022-3856 Comic Book Management System < 2.2.0 - Admin+ SQLi
The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...
CVE-2022-3856
Summary: CVE-2022-3856 affects the WordPress plugin “Comic Book Management System” prior to version 2.2.0. The issue is a SQL injection caused by not sanitizing/escaping a parameter before it is used in a SQL statement, enabling exploitation by users with a role as low as Admin (no user interacti...
CVE-2022-3856: Undefined Security Weakness
The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as Admin...
PT-2022-24455 · WordPress · Comic Book Management System
Name of the Vulnerable Software and Affected Versions: The Comic Book Management System WordPress plugin versions prior to 2.2.0 Description: The issue is related to a SQL injection that occurs because a parameter is not properly sanitized and escaped before being used in a SQL statement. This ca...
Oscar Arzola PressBooks Cross-Site Scripting Vulnerability
Oscar Arzola PressBooks is an application by the individual developer Oscar Arzolat in China. Provides a book content management system. PressBooks has a cross-site scripting vulnerability in version 5.17.3. The vulnerability can be triggered by submitting a long book description to the platform ...
