https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 03:01:31 +0000 https://vulnerability.circl.lu/vuln/cnvd-2019-22880 cnvd-2019-22880 https://vulnerability.circl.lu/vuln/cnvd-2019-22880 https://vulnerability.circl.lu/vuln/fkie_cve-2019-1010034 <p>Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function &#34;AllBarCodes&#34; (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&amp;orderby=title&amp;order=DESC.</p> <p>Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function &#34;AllBarCodes&#34; (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&amp;orderby=title&amp;order=DESC.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2019-1010034 https://vulnerability.circl.lu/vuln/ghsa-r2hp-7g54-pv76 <p>Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function &#34;AllBarCodes&#34; (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&amp;orderby=title&amp;order=DESC.</p> <p>Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function &#34;AllBarCodes&#34; (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&amp;orderby=title&amp;order=DESC.</p> https://vulnerability.circl.lu/vuln/ghsa-r2hp-7g54-pv76 https://vulnerability.circl.lu/vuln/gsd-2019-1010034 gsd-2019-1010034 https://vulnerability.circl.lu/vuln/gsd-2019-1010034