CVE-2015-4633

CVE-2015-4633 affects Koha ILS across multiple releases (notably 3.14.x up to 3.14.16, 3.16.x up to 3.16.12, 3.18.x up to 3.18.08, and 3.20.x up to 3.20.1). Vulnerability details show two SQL injection vectors: (1) unauthenticated injection via the number parameter to opac-tags_subject.pl in the ...

CVE-2015-4633

Multiple SQL injection vulnerabilities in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow 1 remote attackers to execute arbitrary SQL commands via the number parameter to opac-tagssubject.pl in the OPAC interface or 2 remote authenticated...

PT-2018-4384

Name of the Vulnerable Software and Affected Versions Koha versions 3.14.x through 3.14.15 Koha versions 3.16.x through 3.16.11 Koha versions 3.18.x through 3.18.07 Koha versions 3.20.x through 3.20.0 Description The issue allows remote attackers to execute arbitrary SQL commands via the number...

CVE-2018-17428

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

CVE-2018-17428

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

Sql injection

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

CVE-2018-17428

CVE-2018-17428 affects OPAC EasyWeb Five 5.7, with a SQL injection in the w2001/index.php?scelta=campi biblio parameter. The issue is a database query vulnerability in the web application component; CVSS data from multiple sources show a high to critical impact (C/I/A with partial/high implicatio...

CVE-2018-17428

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter...

OPAC EasyWeb Five 5.7 biblio SQL Injection

Exploit Title: OPAC EasyWeb Five 5.7 - 'biblio' SQL Injection Dork: inurl:"index.php?scelta=campi" Date: 2018-10-02 Exploit Author: Dino Barlattani Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Platform: PHP CVE: N/A POC:...

OPAC EasyWeb Five 5.7 nome SQL Injection

Exploit Title: OPAC EasyWeb Five 5.7 - 'nome' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-10-02 Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1 POST...

OPAC EasyWeb Five 5.7 - nome SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: OPAC EasyWeb Five 5.7 - 'nome' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CV...

OPAC EasyWeb Five 5.7 - nome SQL Injection

OPAC EasyWeb Five 5.7 - nome SQL Injection Exploit Title: OPAC EasyWeb Five 5.7 - 'nome' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-10-02 Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Tested on:...

OPAC EasyWeb Five 5.7 - biblio SQL Injection Vulnerability

Exploit for php platform in category web applications...

OPAC EasyWeb Five 5.7 - 'nome' SQL Injection

Exploit Title: OPAC EasyWeb Five 5.7 - 'nome' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-10-02 Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A POC: 1 POST...

OPAC EasyWeb Five 5.7 - 'biblio' SQL Injection

Exploit Title: OPAC EasyWeb Five 5.7 - 'biblio' SQL Injection Dork: inurl:"index.php?scelta=campi" Date: 2018-10-02 Exploit Author: Dino Barlattani Vendor Homepage: http://www.nexusfi.it/ Software Link: http://www.nexusfi.it/easyweb.php Version: 5.7 Category: Webapps Platform: PHP CVE: N/A POC:...

opac.emc.hs.admu.edu.ph XSS vulnerability

Open Bug Bounty ID: OBB-626832 Description| Value ---|--- Affected Website:| opac.emc.hs.admu.edu.ph Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

opac.unistrapg.it XSS vulnerability

Open Bug Bounty ID: OBB-594145 Description| Value ---|--- Affected Website:| opac.unistrapg.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

opac-x-mediathequewimille.biblix.net XSS vulnerability

Open Bug Bounty ID: OBB-575407 Description| Value ---|--- Affected Website:| opac-x-mediathequewimille.biblix.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

opac-x-mediathequesthilairestmesmin.biblix.net XSS vulnerability

Open Bug Bounty ID: OBB-575404 Description| Value ---|--- Affected Website:| opac-x-mediathequesthilairestmesmin.biblix.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79...

opac-x-mediathequestarnoult.biblixnet.net XSS vulnerability

Open Bug Bounty ID: OBB-575403 Description| Value ---|--- Affected Website:| opac-x-mediathequestarnoult.biblixnet.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...