CVE-2025-1356

Needyamin Library Card System 1.0 is affected by a SQL injection in card.php via the id parameter. The issue can be exploited remotely and is backed by public disclosures; root cause is lack of input validation for id. Exploit details are published; no patch/version fix is provided in the documen...

CVE-2025-1356 needyamin Library Card System card.php sql injection

A vulnerability was found in needyamin Library Card System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file card.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...