The vulnerability CVE-2026-78200 affects itsourcecode Library Management System version 1.0. It is caused by improper sanitization of the ID parameter in an unknown function within the editbooks.php file, enabling remote attackers to inject SQL commands. This can potentially lead to unauthorized database access or manipulation. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity) with network attack vector, low privileges required, no user interaction, and partial impacts on confidentiality, integrity, and availability. Exploit code has been published, increasing the risk of exploitation.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database remotely, potentially leading to unauthorized data access or modification. The impact is rated medium based on the CVSS score and partial impacts on confidentiality, integrity, and availability. There are no reports of active exploitation in the wild at this time.

No official patch or remediation is currently available for this vulnerability. Users should monitor the vendor's advisory channels for updates and consider implementing temporary mitigations such as input validation or web application firewalls to detect and block SQL injection attempts. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.