Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Teean

#45500of 56,330
6.1Total CVSS
Vulnerabilities · 1
PT-2019-12314
6.1
2019-04-22
I · I · CVE-2019-11449
**Name of the Vulnerable Software and Affected Versions** I, Librarian version 4.10 **Description** The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the `notes` parameter in the "notes.php" endpoint. **Recommendations** For I, Librarian version 4.10, avoid using the `notes` parameter in the "notes.php" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the "notes.php" endpoint to minimize the risk of exploitation.