i-librarian 安全漏洞

i-librarian is an online service from Martin Kucej Personal Developer that will organize your PDF files and office document collections. A security vulnerability exists in i-librarian versions prior to 5.11.1, which stems from the presence of insecure file type handling logic, resulting in...

CVE-2024-40500

CVE-2024-40500 affects Martin Kucej i-librarian versions 5.11.0 and earlier. Description: a Cross-Site Scripting vulnerability in the import component’s search function can allow a local attacker to execute arbitrary code. The issue is due to improper handling in the search/import flow. Impact is...

CVE-2024-40500

Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component...

CVE-2024-40500: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component...