Moyenne 4.7

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The...

CVE-2026-114264 Première détection SecPulse 02:45

Paquets affectés

Écosystème	Paquet	Concernées	Corrigé
ProjectWorlds	Advanced Library Management System	—	—

Description d'origine La description telle que publiée par la source (souvent en anglais).

A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

Références

Faits clés

CVSS v3: Moyenne 4.7; CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4: Faible 2.0; CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Publication: Oct 22, 2026
Première détection SecPulse: 02:45
GHSA: GHSA-m9xf-m6j3-836x
CWE: CWE-74 CWE-89

NVD GitHub Advisory

Étiquettes(cliquez pour l'explication)

Programming Languages

PHP

Attack Types

SQL Injection

CWE

Cwe 89 Cwe 74

Tous

Projectworlds Advanced Library Management System

Sources de détection

NIST National Vulnerability Database03:19
GitHub Security Advisories (Global)03:33
CVE.org (CVE Program・cvelistV5)02:45