Live › vulnerability › CVE-2026-114263
Go to dashboardProjectWorlds Advanced Library Management System 1.0 passes the roll_number argument of individual_report_search.php into a mysqli_query call without sanitization. A remote attacker can inject SQL to read or alter the application's database.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file individual_report_search.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
This page as .md · .json · in your agent: get_signal("CVE-2026-114263")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.