CVE-2025-0843

Name of the Vulnerable Software and Affected Versions needyamin Library Card System version 1.0

Description A critical issue has been identified in the Admin Panel component, specifically in the admindashboard.php file, where an unknown function is affected. The manipulation of the email and password arguments leads to SQL injection. This issue can be exploited remotely. The exploit has been publicly disclosed and may be used.

Recommendations needyamin Library Card System version 1.0: Update the admindashboard.php file to prevent SQL injection by properly sanitizing the email and password arguments. As a temporary workaround, consider restricting access to the Admin Panel component until the issue is resolved.