WordPress Web Librarian plugin <= 3.5.4 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found in WordPress Web Librarian plugin versions = 3.5.4. Solution Update the WordPress Web Librarian plugin to the latest available version at least 3.5.5...

Deepwoods Software WebLibrarian SQL Injection Vulnerability

Deepwoods Software WebLibrarian is a book management system plugin for use in WordPress from Deepwoods Software, USA. A SQL injection vulnerability exists in the 'AllBarCodes' function in Deepwoods Software WebLibrarian 3.5.2 and earlier versions. The vulnerability stems from a lack of validation...

CVE-2019-11449

I, Librarian 4.10 has XSS via the notes.php notes parameter...

Design/Logic Flaw

I, Librarian 4.10 has XSS via the notes.php notes parameter...

CVE-2019-11449

CVE-2019-11449 affects I, Librarian 4.10 with an XSS vulnerability via the notes parameter in notes.php. The vulnerability is caused by unsanitized input in the notes parameter, enabling cross-site scripting when processed by the application. Impact details are limited in the provided documents; ...

CVE-2019-11449

I, Librarian 4.10 has XSS via the notes.php notes parameter...

CVE-2019-11428

I, Librarian 4.10 has XSS via the export.php exportfiles parameter...

CVE-2019-11428

I, Librarian 4.10 has XSS via the export.php exportfiles parameter...

Design/Logic Flaw

I, Librarian 4.10 has XSS via the export.php exportfiles parameter...

PT-2019-12314

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the notes parameter in the "notes.php" endpoint. Recommendations For I, Librarian versio...

CVE-2019-11428

CVE-2019-11428 affects I, Librarian 4.10 and is exposed via XSS in the export.php export_files parameter. Root cause: improper handling of the export_files input leading to cross-site scripting. Impact and exploitability: not detailed beyond XSS; no in-the-wild exploit information provided. Remed...

CVE-2019-11428

I, Librarian 4.10 has XSS via the export.php exportfiles parameter...

PT-2019-12307

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the export files parameter in the "export.php" API endpoint. Recommendations For I,...

Cross site scripting

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

CVE-2019-11359

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

CVE-2019-11359

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

CVE-2019-11359

Summary of CVE-2019-11359 : A cross-site scripting (XSS) flaw affects I, Librarian version 4.10, exposed via the display.php file. The vulnerability is triggered by supplying a crafted value to the project parameter, enabling remote attackers to inject arbitrary web script or HTML. The PT-2019-12...

CVE-2019-11359

Cross-site scripting XSS vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter...

PT-2019-12255

Name of the Vulnerable Software and Affected Versions I, Librarian version 4.10 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the project parameter in the display.php file. Recommendations For I, Librari...

Appsource School Management System 1.0 - student_id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Appsource School Management System 1.0 - 'studentid' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://www.appsource.ug/school/ Software Link: https://sourceforge.net/p/appsource-school-system/code/ Version: 1.0...