CVE-2026-36872

Sourcecodester Basic Library System v1.0 is vulnerable to an SQL Injection vulnerability located in the /librarysystem/load_book.php file. The root cause is the improper neutralization of special elements used in an SQL command. Exploitation details and specific remediation steps are not provided...

CVE-2026-36874

The SourceCodester Basic Library System v1.0 is vulnerable to SQL Injection within the /librarysystem/load_student.php file. This vulnerability stems from the improper neutralization of special elements used in an SQL command. While the CVSS 3.1 base score is 2.7 (Low) , it requires High privileg...

CVE-2026-36873

The Sourcecodester Basic Library System v1.0 is vulnerable to an SQL Injection flaw located in the /librarysystem/load_admin.php file. The vulnerability arises from the improper neutralization of special elements used in an SQL command , which could allow an attacker to interfere with the queries...