CVE-2022-36735

CVE-2022-36735 affects Library Management System v1.0. A SQL injection vulnerability exists in the /admin/delete.php endpoint via the bookId parameter, enabling attacker-controlled input to influence SQL queries. The CVSSv3.1 impact metrics indicate a CRITICAL severity (9.8) with network attack v...