CVE-2017-7242

Multiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkout_item.php, bibliography/dl_print.php, bibliography/item.php, bibliography/item_barcode_generator.php, bibliography/printed_card.php, circulation/loan_rules.php, master_file/author.php, master_file/coll_type.php, and master_file/doc_language.php and the quickReturnID field to circulation/ajax_action.php.

• CWE-79

• http://www.daimacn.com/post/10.htmlThird Party Advisory
• http://www.securityfocus.com/bid/97062Third Party Advisory, VDB Entry
• http://www.daimacn.com/post/10.htmlThird Party Advisory
• http://www.securityfocus.com/bid/97062Third Party Advisory, VDB Entry

Published

Mar 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7235An issue was discovered in cloudflare-scrape 1.6.6 through 1…
• CVE-2017-7236SQL injection vulnerability in NetApp OnCommand Unified Mana…
• CVE-2017-7237The Spiceworks TFTP Server, as distributed with Spiceworks I…
• CVE-2017-7239Ninka before 1.3.2 might allow remote attackers to obtain se…
• CVE-2017-7240An issue was discovered on Miele Professional PST10 devices.…
• CVE-2017-7241A cross-site scripting (XSS) vulnerability in the MantisBT M…
• CVE-2017-7243Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attacke…
• CVE-2017-7244The _pcre32_xclass function in pcre_xclass.c in libpcre1 in …
• CVE-2017-7245Stack-based buffer overflow in the pcre32_copy_substring fun…
• CVE-2017-7246Stack-based buffer overflow in the pcre32_copy_substring fun…
• CVE-2017-7247Multiple Cross-Site Scripting (XSS) were discovered in Gazel…
• CVE-2017-7248A Cross-Site Scripting (XSS) was discovered in Gazelle befor…