https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T03:01:31.549992+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2019-22880 cnvd-2019-22880 2026-10-01T03:01:38.482606+00:00 cnvd-2019-22880 https://vulnerability.circl.lu/vuln/fkie_cve-2019-1010034 fkie_cve-2019-1010034 2026-10-01T03:01:38.482684+00:00

Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function "AllBarCodes" (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&orderby=title&order=DESC.

 https://vulnerability.circl.lu/vuln/ghsa-r2hp-7g54-pv76 GHSA-r2hp-7g54-pv76 2026-10-01T03:01:38.482747+00:00

Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function "AllBarCodes" (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&orderby=title&order=DESC.

 https://vulnerability.circl.lu/vuln/gsd-2019-1010034 gsd-2019-1010034 2026-10-01T03:01:38.482782+00:00 gsd-2019-1010034