{"id":"CVE-2026-114039","kind":"vulnerability","aliases":["CVE-2026-114039"],"related":[],"title":"Advanced Library Management System: SQL injection via report search dates","description":"A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of the file report_search.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.","summary":"The projectworlds Advanced Library Management System 1.0 builds a SQL query in report_search.php from the dateto and datefrom arguments without sanitising them. A remote attacker can alter the database query to read or change library data.","severity":"medium","cvss":6.5,"epss":0.00192,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["mysql","other","php","self-hosted"],"not_affected_if":["not-installed"],"how_to_check":"- Check whether the application is installed: look for `report_search.php` in the web root of the Advanced Library Management System.\n- Confirm the version is `1.0`, as stated in the sources.","fix":null,"status":"open","published_at":"2026-10-21T04:18:09+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","triaged_at":"2026-10-25T03:49:10+00:00","updated_at":"2026-10-25T03:49:10+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-25T03:49:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Advanced Library Management System: SQL injection via report search dates","impact":"medium","summary":"The projectworlds Advanced Library Management System 1.0 builds a SQL query in report_search.php from the dateto and datefrom arguments without sanitising them. A remote attacker can alter the database query to read or change library data.","category":"other","nicknames":[],"who_cares":["php","self-hosted","mysql"],"confidence":0.6,"needs_auth":"unknown","worst_case":"attacker reads or alters library database records via SQL injection","analyst_note":"Find whether a fix or patched release exists and whether report_search.php requires login, using the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-114039.","how_to_check":"- Check whether the application is installed: look for `report_search.php` in the web root of the Advanced Library Management System.\n- Confirm the version is `1.0`, as stated in the sources.","needs_analyst":true,"not_affected_if":["not-installed"],"who_is_affected":"Sites running projectworlds Advanced Library Management System 1.0 with report_search.php reachable over the network are exposed. The sources do not say whether authentication is required or what default configuration applies. Installations that do not run this application can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000579,"input_tokens":3357,"output_tokens":487,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-114039':13A,16A '-2026':12A,15A '1.0':29B,70C 'advanc':1A,25B,66C 'alter':49B 'argument':41B,86C 'attack':47B,94C,113C 'avail':104C 'build':30B 'chang':56B 'could':109C 'cve':11A,14A 'data':58B 'databas':51B 'date':10A 'datefrom':40B 'dateto':38B 'dateto/datefrom':87C 'execut':81C,97C 'exploit':100C 'file':79C 'function':74C 'host':22B 'identifi':63C 'impact':71C 'inject':6A,92C 'lead':89C 'librari':2A,26B,57B,67C 'made':103C 'manag':3A,27B,68C 'manipul':83C 'mysql':17B 'mysqli':75C 'php':19B 'projectworld':24B,65C 'public':107C 'queri':33B,52B,76C 'read':54B 'remot':46B,98C 'report':8A 'report_search.php':35B,80C 'sanitis':43B 'search':9A 'self':21B 'self-host':20B 'sql':5A,32B,91C 'system':4A,28B,69C 'use':111C 'via':7A 'weak':60C 'without':42B","nicknames":[],"mitigations":[],"who_affected":"Sites running projectworlds Advanced Library Management System 1.0 with report_search.php reachable over the network are exposed. The sources do not say whether authentication is required or what default configuration applies. Installations that do not run this application can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-21T04:18:09+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-114039","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114039","severity":null,"published_at":"2026-10-21T04:18:09+00:00","modified_at":"2026-10-21T16:17:29+00:00","first_seen_at":"2026-10-23T21:57:28+00:00","fetched_at":"2026-10-23T22:29:01+00:00","note":null},{"source":"epss","external_id":"CVE-2026-114039","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-114039","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-24T13:15:55+00:00","fetched_at":"2026-10-24T13:15:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}