PT-2026-27305 · Sourcecodester · Sourcecodester Library Management System

Weqi · Published 2026-03-24 · Updated 2026-03-25 · CVE-2026-4624

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Online Library Management System version 1.0

Description A SQL injection issue exists in SourceCodester Online Library Management System version 1.0. Manipulating the searchField argument in a function within the /home.php file of the Parameter Handler component allows for remote exploitation. The exploit is publicly available.

Recommendations Apply any available updates or patches for SourceCodester Online Library Management System version 1.0. As a temporary workaround, sanitize or validate the searchField input to prevent SQL injection attacks. Restrict access to the /home.php file to minimize the risk of exploitation.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-4624

Affected Products

Sourcecodester Library Management System

References · 7

• 🔥 https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_6.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4624 · Security Note
• https://vuldb.com/?submit.775787 · Note
• https://vuldb.com/?id.352492 · Note
• https://vuldb.com/?ctiid.352492 · Note
• https://twitter.com/CVEarity/status/2036847218993631740 · Twitter Post
• https://sourcecodester.com · Note