A SQL injection vulnerability exists in projectworlds Advanced Library Management System 1.0 in the /add_member.php file via manipulation of the roll_number parameter. This vulnerability allows remote attackers with low privileges to execute unauthorized SQL commands, potentially impacting confidentiality, integrity, and availability. Public exploit code is available. No patch or remediation information is provided.