Scilico vulnerabilities

Products

• I\, Librarian 14

Newest

• i-librarian, scilico i\, librarian +1 more Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local... CVE-2024-40500 8.6 HighAugust 12, 2024
• mkucej mkucej/i-librarian-free, scilico i\, librarian +1 more Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free CVE-2023-3021 4.1 MediumMay 31, 2023
• scilico i\, librarian I, Librarian 4.10 has XSS via the notes.php notes parameter. CVE-2019-11449 6.1 MediumApril 22, 2019
• scilico i\, librarian I, Librarian 4.10 has XSS via the export.php export_files parameter. CVE-2019-11428 6.1 MediumApril 21, 2019
• scilico i\, librarian Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote... CVE-2019-11359 6.1 MediumApril 19, 2019
• scilico i\, librarian I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in... CVE-2018-1000141 9.1 CriticalMarch 23, 2018
• scilico i\, librarian I, Librarian version 4.8 and earlier contains a Cross Site Scripting (XSS) vulnerability in "id"... CVE-2018-1000139 6.1 MediumMarch 23, 2018
• scilico i\, librarian I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of... CVE-2018-1000138 9.1 CriticalMarch 23, 2018
• scilico i\, librarian I, Librarian version 4.8 and earlier contains a Cross site Request Forgery (CSRF) vulnerability... CVE-2018-1000137 8.8 HighMarch 23, 2018
• scilico i\, librarian I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE)... CVE-2018-1000124 10.0 CriticalMarch 13, 2018
• scilico i\, librarian I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the... CVE-2017-1000237 9.8 CriticalNovember 17, 2017
• scilico i\, librarian I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php... CVE-2017-1000236 6.1 MediumNovember 17, 2017
• scilico i\, librarian I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php... CVE-2017-1000235 9.8 CriticalNovember 17, 2017
• scilico i\, librarian I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php... CVE-2017-1000234 5.3 MediumNovember 17, 2017
• scilico labwiki Multiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote... CVE-2011-4333 Public exploit 6.1 MediumOctober 23, 2017