Sourcecodester Basic Library System version 1.0 contains a SQL injection vulnerability in the /librarysystem/load_admin.php file that allows authenticated attackers to execute arbitrary database queries. This vulnerability affects the administrative interface of the affected library management software. The issue has been assigned a CVSS score of 2.7 (Low severity) with a network-based attack vector, low complexity, and a requirement for high privileges to exploit. The potential impact is limited to confidentiality breach with no integrity or availability impact. There is no evidence of active exploitation in the wild, and the vulnerability has not been added to known exploit databases or security advisories, indicating minimal community attention and low immediate risk to organizations running this software.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:razormist:basic_library_system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.