CH0ico/CVE_choco_1

CH0ico/CVE_choco_1

GitHubGitHub
GitHubgithub.com
Releases0
During the security review of "Advanced Library Management System", discovered a critical SQL injection vulnerability in the "borrowed_book_search.php" file.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-13278↗
6.3 MEDIUM6.5 MEDIUM

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowed_book_search.php. Such manipulation of the argument datefrom/dateto leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.