A SQL injection vulnerability exists in projectworlds Advanced Library Management System 1.0 in the /add_librarian.php file via manipulation of the Username argument. The vulnerability can be exploited remotely and has been publicly disclosed. It has a medium severity rating with a CVSS score of 6.3.