287 matches found
Calibre-Web 访问控制错误漏洞
Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from an access control error vulnerability that stems from improper access control in Pypi calibreweb prior to 0.6.16...
CVE-2022-0352 Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web
Cross-site Scripting XSS - Reflected in Pypi calibreweb prior to 0.6.16...
Calibre-Web 跨站脚本漏洞
Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in Calibre-Web before 0.6.16, which stems from the WEB application's lack of proper validation of client-side data. An attacker could exploit the vulnerability ...
Improper Authorization in janeczku/calibre-web
Description With default settings, low-level users will not have permission to edit the sort order of books in private shelf of another user. However, due to incorrect checking, the application does not work as intended. Proof of Concept - Step 1: Login with admin account and go to...
GHSA-WRP6-9W7F-3WXG calibre-web is vulnerable to Cross-site Scripting
calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
calibre-web is vulnerable to Cross-site Scripting
calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
calibre-web is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-WXR6-29PV-CH68 calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
calibre-web is vulnerable to Cross-Site Request Forgery CSRF...
GHSA-XP7P-3GX7-J6WX calibre-web is vulnerable to Business Logic Errors
calibre-web is vulnerable to Business Logic Errors...
calibre-web is vulnerable to Business Logic Errors
calibre-web is vulnerable to Business Logic Errors...
CVE-2021-4164
calibre-web is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4164
calibre-web is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4164
calibre-web is vulnerable to Cross-Site Request Forgery CSRF...
Cross site request forgery (csrf)
calibre-web is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4164 Cross-Site Request Forgery (CSRF) in janeczku/calibre-web
calibre-web is vulnerable to Cross-Site Request Forgery CSRF...
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors...
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors...
CVE-2021-4171
calibre-web is vulnerable to Business Logic Errors...