CVE-2026-114264
CVE-2026-114264 · ProjectWorlds Advanced Library Management System edit_member.php sql injection
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVSS 5.1 · Medium · EPSS 0.2%
- Published
- Updated
Affected products and versions
advanced library management system
- Versions
- 1.0: Affected
No fix published