Yinhaoli

**Name of the Vulnerable Software and Affected Versions** Campcodes Supplier Management System version 1.0 **Description** A flaw exists in Campcodes Supplier Management System version 1.0 related to the processing of the `/admin/view unit.php` file. Manipulation of the `chkId[]` argument can lead to a SQL injection condition. Remote exploitation is possible. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** projectworlds Advanced Library Management System version 1.0 **Description** A flaw exists in projectworlds Advanced Library Management System version 1.0, specifically within the file `/view admin.php`. Manipulation of the `admin id` argument can lead to SQL injection. This issue can be exploited remotely. The exploit has been published. The vulnerable file is `/view admin.php`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Advanced Library Management System version 1.0 **Description** A flaw exists in Advanced Library Management System version 1.0 where manipulation of the `roll number` argument in the `/borrow book.php` file can lead to SQL injection. This issue can be exploited remotely. The details of the exploit have been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.