Approved changes feed: RSS · Atom

cpe:2.3:a:projectworlds:advanced_library_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProjectworlds (1c49ba31-3767-5ff6-9610-c6dcb2aee835)
ProductAdvanced Library Management System (7582e112-c22e-5f8d-9887-a300d38f06fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-114039 vulnerable 2026-11-03 10:15:54.000042 projectworlds Advanced Library Management System report_search.php mysqli_query sql injection
MEDIUM (6.3)
A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of the file report_search.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-10-21T03:30:13.534Z
Updated: 2026-10-21T15:48:55.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114266 vulnerable 2026-11-03 10:15:53.886585 ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection
MEDIUM (6.3)
A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The manipulation of the argument admin_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-10-21T18:15:13.700Z
Updated: 2026-10-23T21:57:56.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114263 vulnerable 2026-11-03 10:15:53.587765 ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection
HIGH (7.3)
A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file individual_report_search.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
Published: 2026-10-21T17:30:08.284Z
Updated: 2026-10-23T22:05:22.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114265 vulnerable 2026-11-03 10:15:53.191767 ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection
MEDIUM (6.3)
A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli_query of the file returned_book_search.php of the component Search Form. Executing a manipulation of the argument datefrom/dateto can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-10-21T18:00:15.205Z
Updated: 2026-10-28T17:58:07.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-114264 vulnerable 2026-11-03 10:15:53.011998 ProjectWorlds Advanced Library Management System edit_member.php sql injection
MEDIUM (4.7)
A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-10-21T17:45:14.657Z
Updated: 2026-10-28T01:30:59.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14571 vulnerable 2026-06-08 07:06:34.720028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14570 vulnerable 2026-06-08 07:06:34.719568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14527 vulnerable 2026-06-08 07:06:34.621669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14212 vulnerable 2026-06-08 07:06:33.871861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14211 vulnerable 2026-06-08 07:06:33.871371 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14210 vulnerable 2026-06-08 07:06:33.869684 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13572 vulnerable 2026-06-08 07:04:32.524431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13278 vulnerable 2026-06-08 07:04:31.897855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13256 vulnerable 2026-06-08 07:04:31.857101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13255 vulnerable 2026-06-08 07:04:31.856617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13254 vulnerable 2026-06-08 07:04:31.856098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13253 vulnerable 2026-06-08 07:04:31.855603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12237 vulnerable 2026-06-08 07:04:29.909069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11475 vulnerable 2026-06-08 07:04:28.201910 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11426 vulnerable 2026-06-08 07:02:28.739333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11425 vulnerable 2026-06-08 07:02:28.737894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.