IL
Product
I, Librarian
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 2Medium 7Low 0
Watch
Add I, Librarian to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11449 | 6.1 | Apr 22 | I, Librarian 4.10 has XSS via the notes.php notes parameter Affected: 4.10 |
| CVE-2019-11428 | 6.1 | Apr 22 | I, Librarian 4.10 has XSS via the export.php export_files parameter Affected: 4.10 |
| CVE-2019-11359 | 6.1 | Apr 20 | Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter Affected: 4.10 |
| CVE-2018-1000139 | 6.1 | Mar 23 | I, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a… Affected: through 4.8 |
| CVE-2017-1000236 | 6.1 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inject malicious client side scripting… Affected: through 4.6; 4.7 |
| CVE-2023-3021 | 5.4 | May 31 | Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free Affected: before 5.10.4 |
| CVE-2017-1000234 | 5.3 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating directories simply by navigating through the… Affected: through 4.6; 4.7 |
Showing 7