CVE-2026-36873: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadadmin.php...

CVE-2026-36874: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadstudent.php...

PT-2026-8325

Name of the Vulnerable Software and Affected Versions zhanghuanhao LibrarySystem 图书馆管理系统 versions up to 1.1.1 Description A flaw exists in zhanghuanhao LibrarySystem 图书馆管理系统 up to version 1.1.1, relating to improper access controls. The issue is present in an unknown function within the...

CVE-2026-2549: Improper Access Control

A vulnerability has been found in zhanghuanhao LibrarySystem 图书馆管理系统 up to 1.1.1. This impacts an unknown function of the file BookController.java. The manipulation leads to improper access controls. The attack is possible to be carried out remotely. The exploit has been disclosed to the public a...

LibrarySystem 访问控制错误漏洞

LibrarySystem is a book management system developed by Walton’s individual developers. Versions of LibrarySystem prior to 1.1.1 contained an access control vulnerability. This vulnerability stemmed from improper access control in the BookController.java file, which could lead to remote attacks...