CVE-2022-37794

CVE-2022-37794 affects Library Management System 1.0. The /card/in-card.php endpoint with the id_no parameter is vulnerable to SQL injection due to unsafeguarded input handling, enabling potential impact to confidentiality, integrity, and availability (per NVD: CVSS 3.1 base score 9.8). No remedi...

PT-2022-24073 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue concerns SQL injection vulnerability in the /card/in-card.php file, specifically affecting the id no parameters. This allows for potential exploitation by injecting malicious SQL...

CVE-2022-37794: Improper Neutralization of Special Elements used in an SQL Command

In Library Management System 1.0 the /card/in-card.php file idno parameters are vulnerable to SQL injection...

CVE-2022-36735

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...

CVE-2022-36734

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php...

CVE-2022-36733

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /admin/del.php...

CVE-2022-36731

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php...

CVE-2022-36657

Library Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /librarian/editbookdetails.php...

CVE-2022-36734

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php...

CVE-2022-36732

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php...

CVE-2022-36730

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php...

CVE-2022-36731

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php...

CVE-2022-36735

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php...

CVE-2022-36733

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /admin/del.php...

CVE-2022-36657

Library Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability via the component /librarian/editbookdetails.php...

CVE-2022-36730

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php...

CVE-2022-36731

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php...

CVE-2022-36732

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php...

CVE-2022-36733

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /admin/del.php...

CVE-2022-36734

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php...