High severity · published Oct 21, 2026
CVE-2026-114263
ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection
New
7.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file individual_report_search.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
Affected product
AL
Advanced Library Management System
ProjectWorlds
More from Advanced Library Management System
9.8
CVE-2025-14571
A vulnerability has been found in projectworlds Advanced Library Management System 1.0
9.8
CVE-2025-14570
A flaw has been found in projectworlds Advanced Library Management System 1.0
9.8
CVE-2025-14527
A weakness has been identified in projectworlds Advanced Library Management System 1.0
9.8
CVE-2025-14212
A flaw has been found in projectworlds Advanced Library Management System 1.0
9.8
CVE-2025-14211
A vulnerability was detected in projectworlds Advanced Library Management System 1.0