8648 matches found
Improper access control
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access read, write and delete to project discussions...
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000138
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...
CVE-2018-1000137
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
CVE-2018-1000138
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000137
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000138
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...
CVE-2018-1000137
The provided connected sources confirm CVE-2018-1000137 affects I, Librarian
CVE-2018-1000141
The CVE-2018-1000141 entry concerns Librarian (Scilico I, Librarian) 4.9 and earlier, with an Incorrect Access Control flaw in ajaxdiscussion.php that lets any user read, write, or delete project discussions. The connected Red Hat/CNVD/EUVD/OSV/PRION/CVE listings corroborate the same description....
CVE-2018-1000137
I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...
CVE-2018-1000141
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access read, write and delete to project discussions...
CVE-2018-1000138
CVE-2018-1000138 affects Librarian (I, Librarian) 4.8 and earlier. The vulnerability is a server-side request forgery (SSRF) in the URL parameter of getFromWeb in functions.php, enabling an attacker to abuse server functionality to read or update internal resources. The available connected record...
I Librarian I-librarian XXE vulnerability
I Librarian I-librarian is an application for editing PDF files. An XXE vulnerability exists in line 154 of the importmetadata.php file in I Librarian I-librarian 4.8 and earlier versions. An attacker can exploit this vulnerability to read the contents of a file and perform a server-side request...
i-funbox.com XSS vulnerability
Open Bug Bounty ID: OBB-579716 Description| Value ---|--- Affected Website:| i-funbox.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-1000124
I Librarian I-librarian version 4.8 and earlier contains a XML External Entity XXE vulnerability in line 154 of importmetadata.phpsimplexmlloadstring that can result in an attacker reading the contents of a file and SSRF. This attack appear to be exploitable via posting xml in the Parameter...
CVE-2018-1000124
I Librarian I-librarian version 4.8 and earlier contains a XML External Entity XXE vulnerability in line 154 of importmetadata.phpsimplexmlloadstring that can result in an attacker reading the contents of a file and SSRF. This attack appear to be exploitable via posting xml in the Parameter...
Xxe
I Librarian I-librarian version 4.8 and earlier contains a XML External Entity XXE vulnerability in line 154 of importmetadata.phpsimplexmlloadstring that can result in an attacker reading the contents of a file and SSRF. This attack appear to be exploitable via posting xml in the Parameter...
CVE-2018-1000124
I Librarian I-librarian version 4.8 and earlier contains a XML External Entity XXE vulnerability in line 154 of importmetadata.phpsimplexmlloadstring that can result in an attacker reading the contents of a file and SSRF. This attack appear to be exploitable via posting xml in the Parameter...