CVE-2026-114039

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of the file report_search.php. Executing a manipulation of the argument dateto/datefrom can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

• CWE-74
• CWE-89

• https://github.com/CyberShailendra1/Advanced-Library-Management-System-Project-in-PHP-with-Barcode-report_search.php
• https://vuldb.com/cve/CVE-2026-114039
• https://vuldb.com/submit/1018558
• https://vuldb.com/vuln/423077
• https://vuldb.com/vuln/423077/cti

Published

Oct 21, 2026

Last Modified

Oct 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-1140A vulnerability was found in UTT 进取 520W 1.7.7-180627. This …8.8
• CVE-2026-11400An untrusted search path issue in the GlobalDatabasePlugin i…8
• CVE-2026-11401An untrusted search path issue in the GlobalDatabasePlugin i…8.6
• CVE-2026-11402The Services Section Block – Showcase Service Details in Gri…6.4
• CVE-2026-11403A vulnerability in Sonatype Nexus Repository Manager's forma…7.5
• CVE-2026-114038A flaw was found in device-mapper-multipath. A local user ca…5.1
• CVE-2026-11404Cesanta Mongoose before 7.22 contains an out-of-bounds read …7.5
• CVE-2026-114040A security vulnerability has been detected in DT42 BerryNet …3.5
• CVE-2026-114041FreeRDP before 3.32.1 on Windows contains a heap out-of-boun…6.5
• CVE-2026-114042FreeRDP 3.32.0 contains a use-after-free vulnerability in th…6.5
• CVE-2026-114043FreeRDP before 3.32.1 contains a heap-based out-of-bounds re…6.5
• CVE-2026-114044FreeRDP before 3.32.1 contains a heap out-of-bounds read vul…5.3