CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

book-reader.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-634819 Description| Value ---|--- Affected Website:| book-reader.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

[SECURITY] Fedora 27 Update: roundcubemail-1.3.6-1.fc27

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

dawateislami.net XSS vulnerability

Open Bug Bounty ID: OBB-599355 Description| Value ---|--- Affected Website:| dawateislami.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Debian DSA-4152-1 : mupdf - security update

Two vulnerabilities were discovered in MuPDF, a PDF, XPS, and e-book viewer, which may result in denial of service or remote code execution. An attacker can craft a PDF document which, when opened in the victim host, might consume vast amounts of memory, crash the program, or, in some cases,...

Zeynep Tufekci on Facebook and Cambridge Analytica

Zeynep Tufekci is particularly cogent about Facebook and Cambridge Analytica. Several news outlets asked me to write about this issue. I didn't, because 1 my book manuscript is due on Monday finally!, and 2 I knew Zeynep would say what I would say, only better...

Bookme Control Panel Cross-Site Scripting Vulnerability

Bookme Control Panel is an online booking plugin for use in WordPress. A cross-site scripting vulnerability exists in the Customers 'Book Me' feature in version 2.0 of Bookme Control Panel, which stems from the program failing to filter user-submitted input. A remote attacker can exploit this...

SQL Injection and Cross-Site Scripting Vulnerabilities in Esmay's Non-Book Resource Management System

Esmay Non-Book Resource Management System can help librarians conveniently manage accompanying books, accompanying CD-ROMs and other non-paper resources, and help patrons directly search, browse online, operate online, partially download, and fully download the CD-ROMs they need. There are SQL...

Alexandria Book Library component SQL injection vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . Alexandria Book Library component is used in one of the data management components . A SQL injection vulnerability exists in...

Alexandria Book Library, 3.1.3, SQL Injection

Alexandria Book Library by Federica Ugolotti, versions 3.1.3 and previous, SQL Injection note that security release 3.1.3 does not fully fix the issue resolution: update to 3.1.4 update notice: alexandriabooklibrary.org/en/downloads/18-components.html...

Open source PHP message feedback management system has XSS vulnerability

Open source PHP message feedback management system is a second development by avenjan a set of small and medium-sized enterprises and personal website for the message feedback management program system , based on PHP MySQL + Bootstrap development , open source and free to use . Open source PHP...

Joomla! Alexandria Book Library 3.1.2 SQL Injection

Exploit Title: Joomla! Component Alexandria Book Library 3.1.2 - SQL Injection Dork: N/A Date: 22.02.2018 Vendor Homepage: https://alexandriabooklibrary.org/ Software Link: https://extensions.joomla.org/extensions/extension/living/education-a-culture/alexandria-book-library/ Software Download:...

CVE-2018-7312

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

CVE-2018-7312

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

Sql injection

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

CVE-2018-7312

SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter...

CVE-2018-7312

CVE-2018-7312 is a SQL injection vulnerability in the Alexandria Book Library component for Joomla! version 3.1.2, exploitable via the letter parameter in the affected extension (com_abook). The issue arises from improper handling of the letter parameter, allowing an attacker to manipulate SQL qu...

Joomla Alexandria Book Library 3.1.2 Component - letter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Alexandria Book Library 3.1.2 - SQL Injection Vendor Homepage: https://alexandriabooklibrary.org/ Software Link:...

Joomla! Component Alexandria Book Library 3.1.2 - 'letter' SQL Injection

Exploit Title: Joomla! Component Alexandria Book Library 3.1.2 - SQL Injection Dork: N/A Date: 22.02.2018 Vendor Homepage: https://alexandriabooklibrary.org/ Software Link: https://extensions.joomla.org/extensions/extension/living/education-a-culture/alexandria-book-library/ Software Download:...

Joomla! Component Alexandria Book Library 3.1.2 - letter SQL Injection

Joomla! Component Alexandria Book Library 3.1.2 - letter SQL Injection Exploit Title: Joomla! Component Alexandria Book Library 3.1.2 - SQL Injection Dork: N/A Date: 22.02.2018 Vendor Homepage: https://alexandriabooklibrary.org/ Software Link:...