CVE-2018-25204

CVE-2018-25204 affects Library CMS 1.0. The vulnerability is an SQL injection in the admin login workflow: the username parameter is injectable, enabling unauthenticated attackers to bypass authentication via boolean-based blind SQL payloads in POST requests to the admin login endpoint, thereby g...