Threats tagged 'ghsa-9966-qw6r-4xwx'

CVE-2025-13580 is a SQL injection vulnerability in code-projects Library System 1.0 affecting an unknown function in the /mail.php file. The vulnerability allows remote attackers with low privileges to manipulate the ID argument, potentially leading to unauthorized data access or modification. The flaw has been publicly disclosed and exploit code is available. No specific affected versions or patches are provided.