PT-2025-28489 · Unknown · Code-Projects Library System
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
code-projects Library System version 1.0
Description:
A critical issue has been discovered, affecting the /approve.php file. The manipulation of the
ID argument leads to SQL injection. This issue can be exploited remotely.Recommendations:
For code-projects Library System version 1.0, consider restricting access to the /approve.php file until a fix is available, and avoid using the
ID argument in this context to minimize the risk of exploitation.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Code-Projects Library System