SC
Vendor
Scilico
15
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-40500 | IL I, Librarian Scilico | 8.6 | Aug 12 | Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import… |
| CVE-2023-3021 | IL I, Librarian Scilico | 5.4 | May 31 | Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free |
| CVE-2019-11449 | IL I, Librarian Scilico | 6.1 | Apr 22 | I, Librarian 4.10 has XSS via the notes.php notes parameter |
| CVE-2019-11428 | IL I, Librarian Scilico | 6.1 | Apr 22 | I, Librarian 4.10 has XSS via the export.php export_files parameter |
| CVE-2019-11359 | IL I, Librarian Scilico | 6.1 | Apr 20 | Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter |
| CVE-2018-1000141 | IL I, Librarian Scilico | 9.1 | Mar 23 | I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access (read, write… |
| CVE-2018-1000139 | IL I, Librarian Scilico | 6.1 | Mar 23 | I, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a… |
| CVE-2018-1000138 | IL I, Librarian Scilico | 9.1 | Mar 23 | I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the… |
| CVE-2018-1000137 | IL I, Librarian Scilico | 8.8 | Mar 23 | I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability in users.php that can result in the password of the admin being forced to be… |
| CVE-2018-1000124 | IL I, Librarian Scilico | 10.0 | Mar 13 | I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.php(simplexml_load_string) that can result in an… |
| CVE-2017-1000237 | IL I, Librarian Scilico | 9.8 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user's password |
| CVE-2017-1000236 | IL I, Librarian Scilico | 6.1 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inject malicious client side scripting… |
| CVE-2017-1000235 | IL I, Librarian Scilico | 9.8 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised |
| CVE-2017-1000234 | IL I, Librarian Scilico | 5.3 | Nov 17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating directories simply by navigating through the… |
| CVE-2011-4333 | LA Labwiki Scilico | 6.1 | Oct 23 | Multiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) from parameter to… |