Lucene search
+L

1042 matches found

CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•14 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameters bookpub/booktitle in...

8.8CVSS7AI score0.00388EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•3 views

CVE-2025-13278: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowedbooksearch.php. Such manipulation of the argument datefrom/dateto leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

8.8CVSS5.5AI score0.00351EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13254: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /addmember.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be performed from remote. The exploit is publicly availab...

8.8CVSS5.6AI score0.00351EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•2 views

CVE-2025-13256: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a manipulation of the argument rollnumber can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

8.8CVSS5.6AI score0.00351EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•24 views

PT-2025-47103

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing manipulation of the argument roll number can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

6.5CVSS7.2AI score0.00351EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

8.8CVSS5.6AI score0.00351EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•19 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter datefrom/dateto in the...

8.8CVSS7AI score0.00351EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/16 11:32 p.m.•29 views

CVE-2025-13253 projectworlds Advanced Library Management System add_librarian.php sql injection

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

6.5CVSS0.00351EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/11/16 12:00 a.m.•15 views

PT-2025-47094

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A flaw exists in projectworlds Advanced Library Management System version 1.0 that allows for SQL injection. This issue is located in the /add librarian.php file, where...

6.5CVSS6.9AI score0.00351EPSS
SaveExploits1References7
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•31 views

CVE-2025-12237

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS7.1AI score0.00478EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/27 7:15 a.m.•17 views

CVE-2025-12237

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS0.00478EPSS
SaveExploits1References4
OSV
OSV
•added 2025/10/27 7:15 a.m.•16 views

CVE-2025-12237

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS5.8AI score0.00478EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/10/27 6:22 a.m.•12 views

CVE-2025-12237 projectworlds Advanced Library Management System index.php sql injection

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

7.5CVSS6.8AI score0.00478EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/10/27 6:22 a.m.•32 views

CVE-2025-12237 projectworlds Advanced Library Management System index.php sql injection

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

7.5CVSS0.00478EPSS
SaveExploits1References4
CVE
CVE
•added 2025/10/27 6:22 a.m.•30 views

CVE-2025-12237

The CVE-2025-12237 entry concerns projectworlds Advanced Library Management System 1.0. A vulnerability exists in the /index.php file where manipulating the keywords parameter enables SQL injection. The flaw is remotely exploitable, and public exploit code is available. Connected sources corrobor...

9.8CVSS7.3AI score0.00478EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2025/10/27 6:22 a.m.•18 views

EUVD-2025-36100

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS7.2AI score0.00478EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•19 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in version 1.0 of projectworlds Advanced Library Management System, which stems from incorrect manipulation of the parameter keywords in the fil...

9.8CVSS7.8AI score0.00478EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•4 views

CVE-2025-12237: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /index.php. Such manipulation of the argument keywords leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/10/21 12:00 a.m.•17 views

WordPress Library Management System plugin unauthorized data modification vulnerability

The WordPress Library Management System plugin is a plugin for extending the functionality of WordPress, mainly used to help users manage website content, user data and system settings more efficiently. The WordPress Library Management System plugin suffers from an unauthorized data modification...

4.3CVSS6.7AI score0.00234EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/20 9:30 p.m.•14 views

EUVD-2025-35092

An issue in Senayan Library Management System SLiMS 9 Bulian v.9.6.1 allows a remote attacker to execute arbitrary code via the scrapimage.php component and the imageURL parameter...

7.6CVSS7.4AI score0.00362EPSS
SaveExploits0References2
Rows per page
Query Builder