Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-14210 1 Projectworlds 1 Advanced Library Management System 2026-02-24 7.3 High
A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /delete_member.php. Such manipulation of the argument user_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-13573 1 Projectworlds 2 Advanced Library Management System, Can Pass Malicious Payloads 2025-12-02 6.3 Medium
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. This vulnerability affects unknown code of the file /add_book.php. The manipulation of the argument image results in unrestricted upload. The attack can be executed remotely. The exploit has been released to the public and may be exploited.