PT-2026-27305 · Sourcecodester · Sourcecodester Library Management System

Weqi · Publicado 2026-03-24 · Atualizado 2026-03-25 · CVE-2026-4624

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Online Library Management System version 1.0

Description A SQL injection issue exists in SourceCodester Online Library Management System version 1.0. Manipulating the searchField argument in a function within the /home.php file of the Parameter Handler component allows for remote exploitation. The exploit is publicly available.

Recommendations Apply any available updates or patches for SourceCodester Online Library Management System version 1.0. As a temporary workaround, sanitize or validate the searchField input to prevent SQL injection attacks. Restrict access to the /home.php file to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-4624

Produtos afetados

Sourcecodester Library Management System

Referências · 7

• 🔥 https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_6.md · Exploit
• https://vuldb.com/?submit.775787 · Nota
• https://vuldb.com/?id.352492 · Nota
• https://vuldb.com/?ctiid.352492 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4624 · Nota de Segurança
• https://twitter.com/CVEarity/status/2036847218993631740 · Publicação no Twitter
• https://sourcecodester.com · Nota