VendorsLibrary Management System Projectlibrary_management_system1.0
Vulnerabilities

Library Management System Project Library Management System 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

32CVEs
CVE-2020-28073
SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system.
Published 2020-12-23 · Modified
9.8EPSS 0.028
CVE-2018-18796
Library Management System 1.0 has SQL Injection via the "Search for Books" screen.
Published 2018-11-16 · Modified
9.8EPSS 0.016
CVE-2022-36728
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php.
Published 2022-08-18 · Modified
9.8EPSS 0.011
CVE-2022-36725
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /student/dele.php.
Published 2022-08-18 · Modified
9.8EPSS 0.011
CVE-2022-36722
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /librarian/history.php.
Published 2022-08-18 · Modified
9.8EPSS 0.011
CVE-2022-36708
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student/bookdetails.php.
Published 2022-08-28 · Modified
9.8EPSS 0.010
CVE-2022-36719
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php.
Published 2022-08-25 · Modified
9.8EPSS 0.010
CVE-2022-37794
In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
Published 2022-09-11 · Modified
9.8EPSS 0.010
CVE-2022-36729
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /librarian/del.php.
Published 2022-08-18 · Modified
9.8EPSS 0.010
CVE-2022-36727
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php.
Published 2022-08-18 · Modified
9.8EPSS 0.010
CVE-2022-36716
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php.
Published 2022-08-25 · Modified
9.8EPSS 0.009
CVE-2022-36734
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.
Published 2022-08-30 · Modified
9.8EPSS 0.009
CVE-2022-36730
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php.
Published 2022-08-30 · Modified
9.8EPSS 0.009
CVE-2022-36731
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php.
Published 2022-08-30 · Modified
9.8EPSS 0.009
CVE-2022-36732
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.
Published 2022-08-30 · Modified
9.8EPSS 0.009
CVE-2022-36735
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.
Published 2022-08-30 · Modified
9.8EPSS 0.009
CVE-2022-36715
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php.
Published 2022-08-25 · Modified
9.8EPSS 0.009
CVE-2022-36714
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php.
Published 2022-08-29 · Modified
9.8EPSS 0.009
CVE-2022-36713
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php.
Published 2022-08-29 · Modified
9.8EPSS 0.009
CVE-2022-36712
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php.
Published 2022-08-29 · Modified
9.8EPSS 0.009
CVE-2022-36711
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.
Published 2022-08-29 · Modified
9.8EPSS 0.009
CVE-2022-36709
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/edit_book_details.php.
Published 2022-08-29 · Modified
9.8EPSS 0.009
CVE-2022-36733
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.
Published 2022-08-30 · Modified
9.8EPSS 0.009
CVE-2022-2214
SourceCodester Library Management System bookdetails.php sql injection
Published 2022-06-27 · Modified
8.8EPSS 0.011
CVE-2022-2212
SourceCodester Library Management System /card/index.php unrestricted upload
Published 2022-06-27 · Modified
8.8EPSS 0.010
CVE-2022-36704
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librarian/studentdetails.php.
Published 2022-08-28 · Modified
8.8EPSS 0.010
CVE-2022-36721
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php.
Published 2022-08-25 · Modified
8.8EPSS 0.010
CVE-2022-36720
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php.
Published 2022-08-25 · Modified
8.8EPSS 0.010
CVE-2022-2491
SourceCodester Library Management System lab.php sql injection
Published 2022-07-20 · Modified
8.8EPSS 0.008
CVE-2022-2492
SourceCodester Library Management System index.php sql injection
Published 2022-07-20 · Modified
8.8EPSS 0.008
CVE-2022-2213
SourceCodester Library Management System cross site scripting
Published 2022-06-27 · Modified
5.4EPSS 0.006
CVE-2022-36657
Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php.
Published 2022-08-30 · Modified
4.8EPSS 0.006