CVE-2025-11475: projectworlds Advanced Library Management System view_member.php sql injection
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11475?
CVE-2025-11475 has been classified as a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-11475?
To fix CVE-2025-11475, sanitize and validate user input in the /view_member.php file to prevent SQL injection.
Who is affected by CVE-2025-11475?
CVE-2025-11475 affects users of the Advanced Library Management System version 1.0 developed by Projectworlds.
What type of vulnerability is CVE-2025-11475?
CVE-2025-11475 is a SQL injection vulnerability that allows attackers to manipulate database queries through the user_id parameter.
Can CVE-2025-11475 be exploited remotely?
Yes, CVE-2025-11475 can be exploited remotely, allowing attackers to execute SQL injection from anywhere.