Medium 4.7

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The...

CVE-2026-114264 First seen on SecPulse 02:45

Affected packages

Ecosystem	Package	Affected	Fixed
ProjectWorlds	Advanced Library Management System	—	—

Original description The description as published by the source.

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 4.7; CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4: Low 2.0; CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Published: Oct 22, 2026
First seen on SecPulse: 02:45
GHSA: GHSA-m9xf-m6j3-836x
CWE: CWE-74 CWE-89

NVD GitHub Advisory

Tags(click for explanation)

Programming Languages

PHP

Attack Types

SQL Injection

CWE

Cwe 89 Cwe 74

All

Projectworlds Advanced Library Management System

Detection sources

NIST National Vulnerability Database03:19
GitHub Security Advisories (Global)03:33
CVE.org (CVE Program・cvelistV5)02:45