opac-x-mediathequevimy.biblix.net XSS vulnerability

Open Bug Bounty ID: OBB-575367 Description| Value ---|--- Affected Website:| opac-x-mediathequevimy.biblix.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

opac-x-bibliothequebullion.biblixnet.net XSS vulnerability

Open Bug Bounty ID: OBB-575370 Description| Value ---|--- Affected Website:| opac-x-bibliothequebullion.biblixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

opac-x-bibliothequeachenheim.biblixnet.net XSS vulnerability

Open Bug Bounty ID: OBB-575369 Description| Value ---|--- Affected Website:| opac-x-bibliothequeachenheim.biblixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

opac-x-bibliothequemaisse.biblixnet.net XSS vulnerability

Open Bug Bounty ID: OBB-459700 Description| Value ---|--- Affected Website:| opac-x-bibliothequemaisse.biblixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

opac-x-bmlannilis.biblix.net XSS vulnerability

Open Bug Bounty ID: OBB-459685 Description| Value ---|--- Affected Website:| opac-x-bmlannilis.biblix.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2015-4639

Cross-site scripting XSS vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remote attackers to inject arbitrary web script or HTML via a crafted list name...

CVE-2015-4639

CVE-2015-4639 describes a cross-site scripting (XSS) vulnerability in Koha’s opac-addbybiblionumber.pl. The issue allows remote attackers to inject arbitrary web script or HTML via a crafted list name in Koha versions: 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1. Exploi...

Huiwen opac of the library back door leads to the source of the leak

0x00 description Hui Wen libsys library opac system is a colleges and universities to use more of the system, the user has Xiamen University, Nanjing University, Dalian Polytechnic University, Nankai University and many other schools. The system used is Oracle + the php, not from public contact t...

OPAC KpwinSQL 1.0.289 SQL injection vulnerability

No description provided by source...

Hui Wen Libsys library management system /opac/search_rss.php parameter doctype injection vulnerability

No description provided by source...

OPAC KpwinSQL Version Detection

Detects the installed version of OPAC KpwinSQL. This script sends an HTTP GET request and tries to ensure the presence of OPAC KpwinSQL from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

OPAC KpwinSQL SQL Injection Vulnerability

OPAC KpwinSQL is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:opac:kpwinsql";...

OPAC KpwinSQL - SQL Injection

OPAC KpwinSQL - SQL Injection @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Product - OPAC KpwinSQL - SQL Injection Date - 6/24/2016 Author - bRpsd Skype: vegnox Vendor HomePage - http://www.kpsys.cz/ Product Download - http://www.kpsys.cz/kpwinsql/demo.html Product Version - / All...

OPAC KpwinSQL - SQL Injection

Exploit for php platform in category web applications @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Product - OPAC KpwinSQL - SQL Injection Date - 6/24/2016 Author - bRpsd Skype: vegnox Vendor HomePage - http://www.kpsys.cz/ Product Download - http://www.kpsys.cz/kpwinsql/demo.html...

OPAC KpwinSQL - SQL Injection

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Product - OPAC KpwinSQL - SQL Injection Date - 6/24/2016 Author - bRpsd Skype: vegnox Vendor HomePage - http://www.kpsys.cz/ Product Download - http://www.kpsys.cz/kpwinsql/demo.html Product Version - / All SQL Version - Firebird 1.5.3 ...

Web Opac: 1,000+ libraries - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Web Opac: 1,000+ libraries published at the 'play' market has multiple vulnerabilities...

lib.thb.gov.tw XSS vulnerability

Vulnerable URL: http://lib.thb.gov.tw/cgi-bin/koha/opac-alert-subscribe.pl?externalid=36=issue=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

汇文 OPAC 信息泄露

连接的账号密码仅用base64编码在网页里可以直接访问到里面存贮了oracle数据库的连接信息，有不少数据库直接在公网可以外连，危害极大...

Koha ILS 3.20.x CSRF / XSS / Traversal / SQL Injection

=============================================================================================== SBA Research Vulnerability Disclosure =============================================================================================== title: Koha Unauthenticated SQL injection product: Koha ILS affecte...

某图书系统通用注入一枚

简要描述： RT 详细说明： http://www.infosea.com.cn/yonghu.html 北京清大新洋科技有限公司 注入文件：opac/dzxxxgjg.jsp 测试案例： http://124.207.106.138:8070/opac/dzxxxgjg.jsp txdz=88952634&yzbm=88952634&dhhm=88952634&dzyj=88952634&dztm=88952634 http://218.241.174.148:8070/opac/dzxxxgjg.jsp...