Product
A vulnerability in ProjectWorlds Advanced Library Management System 1.0 allows remote SQL injection via the roll_number argument in individual_report_search.php.