CVE-2026-114264

CVE-2026-114264 · ProjectWorlds Advanced Library Management System edit_member.php sql injection

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

CVSS 5.1 · Moyenne · EPSS 0,2%

Publication

2026-10-21T17:45:14.657Z

Mise à jour

2026-10-28T01:30:59.530Z

Vérifiez votre serveur →