CVE-2025-14212

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0

Description A flaw exists in projectworlds Advanced Library Management System that allows for SQL injection. This issue is related to an unknown functionality within the /member search.php file. Manipulation of the roll number argument can lead to a successful attack, which can be launched remotely. An exploit for this issue has been published.

Recommendations Apply any available updates or patches to address the vulnerability in the affected file. As a temporary workaround, consider restricting or carefully validating the roll number argument in the /member search.php file to prevent SQL injection attacks.