Vulnerabilities > Library Management System Project

DATE CVE VULNERABILITY TITLE RISK
2022-09-12 CVE-2022-37794 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36657 Cross-site Scripting vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_details.php.
network
low complexity
library-management-system-project CWE-79
4.8
2022-08-30 CVE-2022-36730 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36731 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36732 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36733 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36734 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36735 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36709 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/edit_book_details.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8
2022-08-30 CVE-2022-36711 SQL Injection vulnerability in Library Management System Project Library Management System 1.0
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.
network
low complexity
library-management-system-project CWE-89
critical
9.8