CVE-2020-28073

Description

References

• packetstormsecurity.com/files/160606/Library-Management-System-1.0-SQL-Injection.html · Exploit
• sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html · Product

Más vulnerabilidades de library management system

• CVE-2022-37794CRÍTICO 9.8In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
• CVE-2022-36735CRÍTICO 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.
• CVE-2022-36734CRÍTICO 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.
• CVE-2022-36733CRÍTICO 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.
• CVE-2022-36732CRÍTICO 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.