CVE-2022-2774

CVE-2022-2774: A SQL injection in SourceCodester Library Management System affects the librarian/student.php file via manipulation of the title parameter. The vulnerability is described as critical with remote exploitation capability. The available documents consistently report SQL injection as t...

CVE-2022-2768

CVE-2022-2768: Cross-site scripting in SourceCodester Library Management System, triggered by manipulation of the error argument in the file /qr/I/ (unknown code path). Exploitation is described as remote. Multiple sources (NVD, Red Hat, CVE listings, PRION/PT-Security) consistently identify this...