CVE-2026-6000: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unknown function of the file /sql/library.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The...

CVE-2026-4624: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Library Management System 1.0. The impacted element is an unknown function of the file /home.php of the component Parameter Handler. Performing a manipulation of the argument searchField results in sql injection. The attack can be initiated...

EUVD-2025-7492

Malicious code in bioql PyPI...

CVE-2025-57119: Execution with Unnecessary Privileges

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...

CVE-2025-57118: Improper Privilege Management

An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php...

CVE-2025-50488: Insufficient Session Expiration

Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack...

CVE-2025-50488

The PHPGurukul Online Library Management System v3.0 is vulnerable to a session hijacking attack due to improper session invalidation in the /library/change-password.php component. An attacker can exploit this flaw to hijack active sessions. Remediation requires applying updates to address the se...

CVE-2025-7601

A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated...

CVE-2025-7600

A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-7601

A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated...

CVE-2025-7600

Summary (concrete details): PHPGurukul Online Library Management System 3.0 contains a SQL injection in the admin-side file /admin/student-history.php via the vulnerable parameter stdid . The issue arises from unsanitized user input, enabling remote exploitation and data theft. Multiple sources c...

CVE-2025-7600 PHPGurukul Online Library Management System student-history.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-7601: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Online Library Management System 3.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/student-history.php. The manipulation of the argument stdid leads to cross site scripting. The attack can be initiated...

PT-2025-29457 · Phpgurukul · Phpgurukul Online Library Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: A cross-site scripting issue exists in PHPGurukul Online Library Management System 3.0. The vulnerability is located in the /admin/student-history.php file. Manipulation of...

CVE-2025-7600: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Online Library Management System 3.0. This affects an unknown part of the file /admin/student-history.php. The manipulation of the argument stdid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2020-28130

An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add because .php files can be uploaded to admin/borrower/photos under the web root...

CVE-2025-2093

A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The...

Online Library Management System 3 Password Reset

Exploit Title: Online Library Management System v3 - Password Reset and Email Matching Vulnerability Date: 12.09.2023 Exploit Author: SoSPiro Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-library-management-system/ Version: v3 Tested on: Windows 10 Pro 64 B...

Online Library Management System SQL注入漏洞

SourceCodester Online Library Management System is an online library management system. A SQL injection vulnerability exists in Online Library Management System version 1.0 that originates from unknown code affecting the file lab.php. Input 1 UNION ALL SELECT NULL,NULL,NULL,NULL,CONCAT0x71716b717...

Online Library Management System 2.0 Cross Site Request Forgery Vulnerability

Exploit Title: Online Library Management System Exploit Author : Mohit Dabas Vendor Homepage : https://phpgurukul.com Software Link : https://phpgurukul.com/online-library-management-system/ Version: 2.0 Tested on : LAMPP Description Online Library Management System has got CSRF in admin panel...