library_management_system_project library_management_system CVEs

CVE-2022-37794

Published Sep 12, 2022

In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36735

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36734

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36733

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36732

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36731

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36730

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36657

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php.

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2022-36714

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36713

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36712

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36711

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36709

Published Aug 30, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/edit_book_details.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36708

Published Aug 28, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student/bookdetails.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36704

Published Aug 28, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librarian/studentdetails.php.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2022-36721

Published Aug 25, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2022-36720

Published Aug 25, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2022-36719

Published Aug 25, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36716

Published Aug 25, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36715

Published Aug 25, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36729

Published Aug 18, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /librarian/del.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36728

Published Aug 18, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36727

Published Aug 18, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36725

Published Aug 18, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /student/dele.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2022-36722

Published Aug 18, 2022

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /librarian/history.php.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

library_management_system_project / library_management_system CVEs