Mebiblio

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mebiblio records in CISA KEV

No Mebiblio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mebiblio 4 records MEDIUM

Records

4 records

TI-2007-05811 CVE-2007-6089 · GHSA-22j2-46v6-f42v

PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote…

MEDIUM 47

PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04597 Published 2007-11-22 No fix listed CWE-94

TI-2008-02538 CVE-2008-2648 · GHSA-p88m-3v2c-3rqc

Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows…

LOW 36

Unrestricted file upload vulnerability in upload/uploader.html in meBiblio 0.4.7 allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the files/ directory.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03326 Published 2008-06-10 No fix listed CWE-20

TI-2008-02537 CVE-2008-2647 · GHSA-cm59-m98p-76g5

SQL injection vulnerability in admin/journal_change_mask.inc.php in meBiblio 0.4.7 allows…

LOW 35

SQL injection vulnerability in admin/journal_change_mask.inc.php in meBiblio 0.4.7 allows remote attackers to execute arbitrary SQL commands via the JID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-06-10 No fix listed CWE-89

TI-2008-02536 CVE-2008-2646 · GHSA-qjxh-ph22-2wcj

Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in meBiblio 0.4.7 allow remote attackers to inject arbitrary web script or HTML via the (1) sql parameter to dbadd.inc.php, (2) InsertJournal parameter to add_journal_m…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-06-10 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0