Approved changes feed: RSS · Atom

cpe:2.3:a:sourcecodester:library_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSourcecodester (f6c988b2-f9bb-51b9-8f02-f23eef2a7551)
ProductLibrary Management System (2a5864a5-9a1b-54b5-8950-7a3f9b054c9c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2774 vulnerable 2026-06-08 05:43:36.442520 SourceCodester Library Management System student.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is the identifier assigned to this vulnerability.
Published: 2022-08-11T11:51:43.000Z
Updated: 2025-04-15T13:51:40.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2768 vulnerable 2026-06-08 05:43:36.437087 SourceCodester Library Management System cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in SourceCodester Library Management System. This vulnerability affects unknown code of the file /qr/I/. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-206164.
Published: 2022-08-11T11:50:22.000Z
Updated: 2025-04-15T13:52:30.065Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2492 vulnerable 2026-06-08 05:43:35.677663 SourceCodester Library Management System index.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND (SELECT 2625 FROM (SELECT(SLEEP(5)))MdIL) AND 'KXmq'='KXmq&Password=1231312312 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2022-07-20T11:35:56.000Z
Updated: 2025-04-15T14:03:25.449Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2491 vulnerable 2026-06-08 05:43:35.676307 SourceCodester Library Management System lab.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SourceCodester Library Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file lab.php. The manipulation of the argument Section with the input 1' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,CONCAT(0x71716b7171,0x546e4444736b7743575a666d4873746a6450616261527a67627944426946507245664143694c6a4c,0x7162706b71),NULL,NULL,NULL,NULL# leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2022-07-20T11:35:50.000Z
Updated: 2025-04-15T14:03:37.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2214 vulnerable 2026-06-08 05:42:50.443348 SourceCodester Library Management System bookdetails.php sql injection
MEDIUM (6.3)
A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND (SELECT 9198 FROM (SELECT(SLEEP(5)))iqZA)-- PbtB leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2022-06-27T06:45:30.000Z
Updated: 2025-04-15T14:12:51.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2213 vulnerable 2026-06-08 05:42:50.442841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2212 vulnerable 2026-06-08 05:42:50.441274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.