CVE-2025-7184: code-projects Library System books.php sql injection
Published Jul 8, 2025
·Updated
A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. This affects an unknown part of the file /user/teacher/books.php. The manipulation of the argument Search leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Code-projects Library System
Code-projects Library System=1.0
Event History
Jul 8, 2025
CVE Published
via MITRE·03:32 PM
Data Sourced
via MITRE·03:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Apr 29, 57559
Event
via FIRST·06:29 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-7184?
CVE-2025-7184 has been classified as critical.
2
What type of vulnerability is CVE-2025-7184?
CVE-2025-7184 is an SQL injection vulnerability.
3
How can CVE-2025-7184 be exploited?
CVE-2025-7184 can be exploited remotely through manipulated arguments in the /user/teacher/books.php file.
4
What software versions are affected by CVE-2025-7184?
CVE-2025-7184 affects Code-projects Library System version 1.0.
5
How do I fix CVE-2025-7184?
To fix CVE-2025-7184, you should sanitize inputs and use prepared statements when querying the database.