ProjectWorlds Advanced Library Management System 1.0 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/projectworlds-advanced-library-management-system-1.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 21 Oct 2026 19:57:37 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgProjectWorlds Advanced Library Management System SQL Injection (CVE-2026-114263)https://feed.craftedsignal.io/briefs/2026-10-advanced-library-system-sqli/Wed, 21 Oct 2026 19:57:37 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-advanced-library-system-sqli/A vulnerability in ProjectWorlds Advanced Library Management System 1.0 allows remote SQL injection via the roll_number argument in individual_report_search.php.<p>A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The function mysqli_query in the file individual_report_search.php is susceptible to SQL injection through the manipulation of the roll_number argument. The attack may be launched remotely, and public exploit code is available.</p> highadvisory