Library System books.php File SQL Injection Vulnerability

Library System is a library system. The Library System suffers from an SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter Search in the file /user/teacher/books.php. An attacker can exploit this vulnerability to execute...

CVE-2025-7184

CVE-2025-7184 affects code-projects Library System 1.0, specifically the file path /user/teacher/books.php. The vulnerability is a SQL injection triggered by manipulating the argument named Search ; exploitation is possible remotely and has been disclosed publicly. Multiple sources describe the r...

CVE-2025-7184: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. This affects an unknown part of the file /user/teacher/books.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

xiaohuanxiong SQL injection vulnerability

xiaohuanxiong is an open source comic CMS by guoguo individual developers. xiaohuanxiong version 1.0 is vulnerable to SQL injection, which originates from the id parameter in /app/controller/Books.php. No detailed vulnerability details are available...

CVE-2022-26268

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php...

Sql injection

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php...

PT-2022-17754

Name of the Vulnerable Software and Affected Versions Xiaohuanxiong version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/app/controller/Books.php" API endpoint. Recommendations For Xiaohuanxiong version 1.0, as a temporar...

CVE-2022-26268: Improper Neutralization of Special Elements used in an SQL Command

Xiaohuanxiong v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /app/controller/Books.php...

origami.at XSS vulnerability

Open Bug Bounty ID: OBB-558219 Description| Value ---|--- Affected Website:| origami.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2009-4889

SQL injection vulnerability in books.php in the Book Panel bookpanel module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter...

CVE-2009-4889

CVE-2009-4889 affects the PHP-Fusion delivery of the Book Panel module, specifically the books.php file used to manage books. The vulnerability arises from insufficient input sanitization in the bookid parameter, leading to an SQL injection vulnerability. This enables remote attackers to craft in...

CVE-2009-4889: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in books.php in the Book Panel bookpanel module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the bookid parameter...