CVE-2024-1829

CVE-2024-1829 affects code-projects Library System 1.0. The vulnerability is in Source/librarian/user/student/registration.php where manipulation of email, regno, phone, or username leads to SQL injection. It is remote, with the exploit disclosed publicly. Affected CVSS metrics include a high/cri...

CVE-2024-1830

CVE-2024-1830 affects code-projects Library System 1.0. The vulnerable component is the file Source/librarian/user/student/lost-password.php, where the manipulation of the email parameter leads to an SQL injection. The issue can be exploited remotely and the exploit has been disclosed publicly. R...

CVE-2024-1827

CVE-2024-1827 affects code-projects Library System 1.0. The vulnerability resides in the login path (Source/librarian/user/teacher/login.php) where manipulating the username and password parameters leads to an SQL injection. The issue is exploitable remotely and, per available sources, the exploi...

CVE-2024-1828

Code-projects Library System 1.0 is affected by a SQL injection in Source/librarian/user/teacher/registration.php. The vulnerability arises from unsafely handling the arguments email, idno, phone, and username, enabling remote exploitation. Public exploitation information is present, and the entr...

CVE-2024-1826

The CVE-2024-1826 entry affects code-projects Library System 1.0, specifically the file Source/librarian/user/student/login.php. The vulnerability arises from improper handling of the username and password parameters, allowing SQL injection. The attack can be initiated remotely and, according to ...