Sql injection

2024-02-2318:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

library system 1.0

critical

sql injection

user registration

functionality

remote attack

exploit disclosure

vdb-254617

nvd

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254617 was assigned to this vulnerability.