Skip to content
OpenAdvisories
High · 7.3 CVE-2024-1829 EUVD-2024-17554GHSA-94q5-q5cp-xvh6

code-projects Library System registration.php sql injection

Published Feb 23, 2024 · Updated Aug 1, 2024 · Assigned by VulDB

Description

A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno/phone/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-254617 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
code-projects Library System 1.0 —

References