EUVD-2026-107478

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqliquery of the file profile.php. The manipulation of the argument adminid leads to sql injection. The attack is possible to be carried out remotely. The exploit has be...

CVE-2026-114266

A security vulnerability exists in ProjectWorlds Advanced Library Management System 1.0 . The flaw resides in the mysqli_query function within the profile.php file, where improper handling of the admin_id argument allows for a SQL injection . This vulnerability can be exploited remotely , and pub...

CVE-2026-114265

The ProjectWorlds Advanced Library Management System 1.0 is vulnerable to SQL injection via the Search Form component. The flaw exists in the mysqli_query function within the returned_book_search.php file, where improper handling of the datefrom and dateto arguments allows for remote execution. P...

EUVD-2026-107425

A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqliquery of the file returnedbooksearch.php of the component Search Form. Executing a manipulation of the argument datefrom/dateto can lead to sql injection. The attack can be...

CVE-2026-114264

The ProjectWorlds Advanced Library Management System 1.0 is vulnerable to a SQL injection flaw within an unknown function in the edit_member.php file. Attackers can manipulate the firstname , middlename , lastname , address , branch , or type arguments to execute the injection. Remote exploitatio...

EUVD-2026-107415

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file editmember.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote...

CVE-2026-114263

A SQL injection vulnerability exists in the ProjectWorlds Advanced Library Management System 1.0 within the individual_report_search.php file. The flaw is located in the mysqli_query function, where improper handling of the roll_number argument allows for remote exploitation. An exploit is public...

EUVD-2026-107410

A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqliquery of the file individualreportsearch.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit is...

CVE-2026-114039

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqliquery of the file reportsearch.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-114039 projectworlds Advanced Library Management System report_search.php mysqli_query sql injection

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqliquery of the file reportsearch.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-114039 projectworlds Advanced Library Management System report_search.php mysqli_query sql injection

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqliquery of the file reportsearch.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-114039

A SQL injection vulnerability exists in the projectworlds Advanced Library Management System 1.0 . The flaw is located in the mysqli_query function within the report_search.php file, where insufficient sanitization of the dateto and datefrom arguments allows for remote exploitation. Publicly avai...

EUVD-2026-107039

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqliquery of the file reportsearch.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has been...

PT-2026-120437

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli query of the file report search.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has bee...

CVE-2025-14571: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrowbook.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-14570: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

CVE-2025-14527: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /viewbook.php. Executing a manipulation of the argument bookid can lead to sql injection. The attack can be executed remotely. The exploit has been made...

CVE-2025-14212: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /membersearch.php. Executing a manipulation of the argument rollnumber can lead to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2025-14210: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /deletemember.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

CVE-2025-14211: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletebook.php. Performing a manipulation of the argument bookid results in sql injection. The attack may be initiated remotely. The exploi...