Lucene search
+L

274 matches found

NVD
NVD
added 2023/01/31 6:15 p.m.43 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.8CVSS9.5AI score0.00888EPSS
SaveExploits1References2
Prion
Prion
added 2023/01/31 6:15 p.m.21 views

Design/Logic Flaw

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

7.5CVSS9.3AI score0.00888EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/01/31 12:00 a.m.11 views

i-librarian 代码问题漏洞

i-librarian is an online service from Martin Kucej Personal Developer that will organize your PDF files and office document collections. A security vulnerability exists in i-librarian version 4.10, which stems from an arbitrary file upload vulnerability in ajaxsupplement.php...

9.8CVSS8.5AI score0.00888EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/01/31 12:00 a.m.42 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.7AI score0.00888EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/01/31 12:00 a.m.14 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.5AI score0.00888EPSS
SaveExploits1References2
CVE
CVE
added 2023/01/31 12:00 a.m.74 views

CVE-2022-47854

CVE-2022-47854 affects i-librarian 4.10 and involves an Arbitrary file upload vulnerability in ajaxsupplement.php . The incident is categorized as a high‑impact issue (CVSS v3.1: 9.8, Critical, Network attack vector, no user interaction). Root cause details are not fully disclosed in the connecte...

9.8CVSS9.3AI score0.00888EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/01/31 12:00 a.m.19 views

CVE-2022-47854

i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php...

9.8CVSS9.4AI score
SaveExploits0References4
OSV
OSV
added 2022/08/30 9:15 p.m.10 views

CVE-2022-36657

Library Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /librarian/editbookdetails.php...

4.8CVSS5.7AI score0.00551EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/30 9:15 p.m.5 views

CVE-2022-36730

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php...

9.8CVSS7.4AI score0.00893EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/30 9:15 p.m.7 views

CVE-2022-36732

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php...

9.8CVSS5.9AI score0.00893EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/08/30 8:43 p.m.34 views

CVE-2022-36731

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php...

10AI score0.00893EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/30 12:15 a.m.12 views

CVE-2022-36713

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php...

9.8CVSS7.4AI score0.00893EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/30 12:00 a.m.14 views

Library Management System 跨站脚本漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which originates from a cross-site scripting XSS vulnerability discovered...

4.8CVSS6.1AI score0.00551EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/30 12:00 a.m.9 views

PT-2022-23529 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is present in the /librarian/edit book details.php component. Cross-site scripting XSS is a type of securi...

4.8CVSS5AI score0.00551EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/08/30 12:00 a.m.17 views

PT-2022-23590 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the bookId parameter at the "/librarian/delete.php" API endpoint. Recommendations: For Library...

9.8CVSS9.6AI score0.00893EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/08/29 12:00 a.m.15 views

PT-2022-23576 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Section parameter at the "/librarian/lab.php" API endpoint. Recommendations: For Library...

9.8CVSS9.4AI score0.00893EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.11 views

The vulnerability of the /librarian/bookdetails.php component of the Library Management System allows a malicious individual to execute arbitrary SQL queries.

The vulnerability of the /librarian/bookdetails.php component of the Library Management System lies in the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS5.9AI score
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/08/29 12:00 a.m.12 views

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the...

9.8CVSS8.5AI score0.00893EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.18 views

The vulnerability of the /librarian/studentdetails.php component of the Library Management System allows a malicious individual to execute arbitrary SQL queries.

The vulnerability of the /librarian/studentdetails.php component of the Library Management System lies in the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS8AI score0.0098EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/08/28 11:15 p.m.12 views

CVE-2022-36704

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librarian/studentdetails.php...

8.8CVSS7.4AI score0.0098EPSS
SaveExploits1References2
Rows per page
Query Builder