Ebook Store < 5.78 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Ebook Store < 5.78 - Unauthenticated Sensitive Data Disclose

The plugin does not have authorisation check in its ebookstoreexportorders function, allowing unauthenticated users to call it and retrieve order information...

WordPress Ebook Store Plugin <= 5.775 is vulnerable to Broken Authentication

Software Ebook Store Type Plugin Vulnerable versions = 5.775 Fixed in 5.78 OWASP Top 10 A5: Broken Access Control Classification Broken Authentication CVE CVE-2023-22701 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID eb6c903602b9 Credits yuyudhn Required privilege...

WordPress Ebook Store Plugin <= 5.775 is vulnerable to Cross Site Scripting (XSS)

Software Ebook Store Type Plugin Vulnerable versions = 5.775 Fixed in 5.78 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-22690 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bf3f6e253a15 Credits yuyudhn Required privilege...

SUSE CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

Flying Spin eBook Reader Windows Client has xss Vulnerability

Fly Turn eBook Reader is a powerful tool for reading and managing eBooks. An xss vulnerability exists in the Windows client of FlyTurn eBook Reader, which can be exploited by an attacker to obtain user cookie information...

Download eBook: Top virtual CISOs share 7 tips for vCISO service providers

Virtual Chief Information Security Officer vCISO services also known as 'Fractional CISO' or 'CISO-as-a-Service' are growing in popularity, especially as growing cyber threats, tightening regulatory demands and strict cyber insurance requirements are driving small to medium-sized enterprises dema...

编号撤回

HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. This CVE number has been withdrawn...

CVE-2021-32428

SQL Injection vulnerability in viaviwebtech Android EBook App Books App, PDF, ePub, Online Book Reading, Download Books 10 via the authorid parameter to api.php...

CVE-2021-32428

SQL Injection vulnerability in viaviwebtech Android EBook App Books App, PDF, ePub, Online Book Reading, Download Books 10 via the authorid parameter to api.php...

CVE-2021-32428

SQL Injection vulnerability in viaviwebtech Android EBook App Books App, PDF, ePub, Online Book Reading, Download Books 10 via the authorid parameter to api.php...

Sql injection

SQL Injection vulnerability in viaviwebtech Android EBook App Books App, PDF, ePub, Online Book Reading, Download Books 10 via the authorid parameter to api.php...

Libmobi 代码问题漏洞

Libmobi is a C library . It is used to process documents in the Mobipocket/Kindle MOBI e-book format. A code issue vulnerability exists in Libmobi versions prior to 0.11, which stems from NULL pointer dereferencing...

CVE-2021-32428

SQL Injection vulnerability in viaviwebtech Android EBook App Books App, PDF, ePub, Online Book Reading, Download Books 10 via the authorid parameter to api.php...

CVE-2021-32428

The CVE-2021-32428 entry describes a SQL injection in the viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books). The vulnerability is triggered through the author_id parameter to api.php, indicating an input validation flaw in that endpoint. CVSS metrics indic...

viaviwebtech Android EBook App SQL注入漏洞

viaviwebtech Android EBook App is an eBook application by viaviwebtech India. Books can be read online and offline. A security vulnerability exists in viaviwebtech Android EBook App 10, which stems from an SQL injection that may be triggered via the authorid parameter of api.php...

Calibre-Web 代码问题漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. Calibre-Web suffers from a server-side cross-site request forgery vulnerability, no detailed vulnerability details are available at this time...

[SECURITY] Fedora 34 Update: calibre-4.23.0-8.fc34

Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...

Calibre 授权问题漏洞

Calibre is an open source, free, all-in-one eBook reading management and format conversion tool from Kovid Goyal, an individual developer in India. An authorization issue vulnerability exists in Calibre, which stems from the product's devices/linuxmounthelper.c file not validating user privileges...

The vulnerability of Adobe Digital Editions’ e-book reading software, which allows a hacker to disclose protected information

The vulnerability of the Adobe Digital Editions e-book reading program is related to deficiencies in its security mechanisms. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...