CVE-2026-114264
MEDIUM
NVD
CVSS Score
4.7
Severity
MEDIUM
Published
Oct 21, 2026
Vendor
unknown
Description
A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a manipulation of the argument firstname/middlename/lastname/address/branch/type results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.