Medium 6.3

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1...

CVE-2026-114266 First seen on SecPulse Oct 22, 03:15

Affected packages

Ecosystem	Package	Affected	Fixed
ProjectWorlds	Advanced Library Management System	—	—

Original description The description as published by the source.

A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The manipulation of the argument admin_id leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.3; CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4: Low 2.1; CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Published: Oct 22, 2026
First seen on SecPulse: Oct 22, 03:15
GHSA: GHSA-rc3g-qvgp-hw2x
CWE: CWE-74

NVD GitHub Advisory

Tags(click for explanation)

Programming Languages

PHP

Attack Types

SQL Injection

CWE

Cwe 89 Cwe 74

All

Projectworlds Advanced Library Management System

Detection sources

NIST National Vulnerability DatabaseOct 22, 04:17
GitHub Security Advisories (Global)Oct 22, 06:32
CVE.org (CVE Program・cvelistV5)Oct 22, 03:15