Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2024/12/12 4:23 a.m.34 views

CVE-2024-12406 Library Management System <= 3.2.0 - Authenticated (Subscriber+) SQL Injection

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the 'owt7borrowbooksid' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

6.5CVSS0.0041EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/12 4:23 a.m.51 views

CVE-2024-12406

CVE-2024-12406 affects the Library Management System – Manage e‑Digital Books Library WordPress plugin. It is vulnerable to SQL Injection via the owt7_borrow_books_id parameter in all versions up to 3.0.0 due to insufficient escaping of user input and inadequate SQL query preparation. Exploitatio...

6.5CVSS7.2AI score0.0041EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/12 4:23 a.m.8 views

CVE-2024-12406 Library Management System <= 3.2.0 - Authenticated (Subscriber+) SQL Injection

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the 'owt7borrowbooksid' parameter in all versions up to, and including, 3.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...

6.5CVSS7.2AI score0.0041EPSS
SaveExploits0References3
Rows per page
Query Builder