ProjectWorlds Advanced Library Management System SQL Injection (CVE-2026-114263)
A vulnerability in ProjectWorlds Advanced Library Management System 1.0 allows remote SQL injection via the roll_number argument in individual_report_search.php.
CVE search metadata
CVE search record: CVE-2026-114263. Severity: high. CVSS: 7.3. KEV: no. Product: ProjectWorlds Advanced Library Management System 1.0. Brief: ProjectWorlds Advanced Library Management System SQL Injection (CVE-2026-114263). Brief link: https://feed.craftedsignal.io/briefs/2026-10-advanced-library-system-sqli/
Triage facts
Revision 1- Applicability
- ProjectWorlds Advanced Library Management System 1.0
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Oct 21, 19:57 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The function mysqli_query in the file individual_report_search.php is susceptible to SQL injection through the manipulation of the roll_number argument. The attack may be launched remotely, and public exploit code is available.