Threats tagged 'ghsa-g62q-chj4-h9wq'

A SQL injection vulnerability exists in code-projects Library System 1.0 within the Login component's /index.php file. The flaw allows remote attackers to manipulate the Username argument to execute unauthorized SQL commands. Public exploit code has been disclosed. The vulnerability has a high severity rating with a CVSS score of 7.3.