https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 19:06:33 +0000 https://vulnerability.circl.lu/vuln/cve-2019-1010034 <p><strong>Affected:</strong> Deepwoods Software WebLibrarian</p> <p>Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function &#34;AllBarCodes&#34; (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&amp;orderby=title&amp;order=DESC.</p> <p><strong>Affected:</strong> Deepwoods Software WebLibrarian</p> <p>Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function &#34;AllBarCodes&#34; (defined at database_code.php line 1018) is vulnerable to a boolean-based blind sql injection. This function call can be triggered by any user logged-in with at least Volunteer role or manage_circulation capabilities. PoC : /wordpress/wp-admin/admin.php?page=weblib-circulation-desk&amp;orderby=title&amp;order=DESC.</p> https://vulnerability.circl.lu/vuln/cve-2019-1010034