CVE-2026-114266 | ProjectWorlds Advanced Library Management System 1.0 profile.php mysqli_query admin_id sql injection

October 21, 2026 Yanac

A vulnerability was found in ProjectWorlds Advanced Library Management System 1.0. It has been rated as critical. This impacts the function mysqli_query of the file profile.php. The manipulation of the argument admin_id leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-114266. The attack is possible to be carried out remotely. Moreover, an exploit is present.VulDB Recent EntriesRead More