CVE-2025-13255: projectworlds Advanced Library Management System book_search.php sql injection
A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /booksearch.php. Performing a manipulation of the argument bookpub/booktitle results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13255?
CVE-2025-13255 is classified as a critical severity vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-13255?
To fix CVE-2025-13255, sanitize and validate user input in the /book_search.php file to prevent SQL injection attacks.
What impact does CVE-2025-13255 have on affected systems?
CVE-2025-13255 can lead to unauthorized access to the database, data manipulation, and leakage of sensitive information.
Which versions of the Advanced Library Management System are affected by CVE-2025-13255?
CVE-2025-13255 affects version 1.0 of the Advanced Library Management System.
Is CVE-2025-13255 being actively exploited in the wild?
As of now, there are ongoing reports of active exploitation of CVE-2025-13255, making it urgent to patch affected systems.