Library Management System Project vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2022-37794 In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.Critical 9.8 · Sep 11, 2022
• CVE-2022-36735 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.Critical 9.8 · Aug 30, 2022
• CVE-2022-36734 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.Critical 9.8 · Aug 30, 2022
• CVE-2022-36733 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.Critical 9.8 · Aug 30, 2022
• CVE-2022-36732 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.Critical 9.8 · Aug 30, 2022
• CVE-2022-36731 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php.Critical 9.8 · Aug 30, 2022
• CVE-2022-36730 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php.Critical 9.8 · Aug 30, 2022
• CVE-2022-36714 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /staff/lab.php.Critical 9.8 · Aug 29, 2022
• CVE-2022-36713 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Section parameter at /librarian/lab.php.Critical 9.8 · Aug 29, 2022
• CVE-2022-36712 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php.Critical 9.8 · Aug 29, 2022
• CVE-2022-36711 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/bookdetails.php.Critical 9.8 · Aug 29, 2022
• CVE-2022-36709 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/edit_book_details.php.Critical 9.8 · Aug 29, 2022
• CVE-2022-36708 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /student/bookdetails.php.Critical 9.8 · Aug 28, 2022
• CVE-2022-36704 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /librarian/studentdetails.php.High 8.8 · Aug 28, 2022
• CVE-2022-36721 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the Textbook parameter at /admin/modify.php.High 8.8 · Aug 25, 2022
• CVE-2022-36720 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/modify1.php.High 8.8 · Aug 25, 2022
• CVE-2022-36719 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok parameter at /admin/history.php.Critical 9.8 · Aug 25, 2022
• CVE-2022-36716 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/changestock.php.Critical 9.8 · Aug 25, 2022
• CVE-2022-36715 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php.Critical 9.8 · Aug 25, 2022
• CVE-2022-36729 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /librarian/del.php.Critical 9.8 · Aug 18, 2022
• CVE-2022-36728 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php.Critical 9.8 · Aug 18, 2022
• CVE-2022-36727 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php.Critical 9.8 · Aug 18, 2022
• CVE-2022-36725 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /student/dele.php.Critical 9.8 · Aug 18, 2022
• CVE-2022-36722 Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /librarian/history.php.Critical 9.8 · Aug 18, 2022
• CVE-2018-18796 Library Management System 1.0 has SQL Injection via the "Search for Books" screen.Critical 9.8 · Nov 16, 2018