CVE-2026-114265 | ProjectWorlds Advanced Library Management System 1.0 Search Form returned_book_search.php mysqli_query datefrom/dateto sql injection

A vulnerability was found in ProjectWorlds Advanced Library Management System 1.0. It has been declared as critical. This affects the function mysqli_query of the file returned_book_search.php of the component Search Form. Executing a manipulation of the argument datefrom/dateto can lead to sql injection.

This vulnerability is handled as CVE-2026-114265. The attack can be executed remotely. Additionally, an exploit exists.VulDB Recent EntriesRead More