CVE-2026-114265

A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli_query of the file returned_book_search.php of the component Search Form. Executing a manipulation of the argument datefrom/dateto can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

• CWE-74
• CWE-89

• https://github.com/CyberShailendra1/Advanced-Library-Management-System-Project-in-PHP-with-Barcode-returned_book_search.php
• https://vuldb.com/cve/CVE-2026-114265
• https://vuldb.com/submit/1018753
• https://vuldb.com/vuln/424697
• https://vuldb.com/vuln/424697/cti

Published

Oct 21, 2026

Last Modified

Oct 21, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11426The UnderConstructionPage PRO plugin for WordPress is vulner…6.5
• CVE-2026-114260A vulnerability has been found in oretnom23 file-management-…6.5
• CVE-2026-114261A vulnerability was found in MomoTommy file-management-syste…7.3
• CVE-2026-114262A vulnerability was determined in file-management-system dc9…7.3
• CVE-2026-114263A vulnerability was identified in ProjectWorlds Advanced Lib…7.3
• CVE-2026-114264A security flaw has been discovered in ProjectWorlds Advance…4.7
• CVE-2026-114266A security vulnerability has been detected in ProjectWorlds …6.3
• CVE-2026-114267A vulnerability was detected in SourceCodester Food Order Ma…7.3
• CVE-2026-114268A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affecte…9.9
• CVE-2026-11427Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-11429Two endpoints in the Vault Service ScriptsController, shared…10
• CVE-2026-1143A weakness has been identified in TOTOLINK A3700R 9.1.2u.582…8.8