A SQL injection vulnerability exists in projectworlds Advanced Library Management System 1.0 in the /book_search.php file. Manipulating the book_pub or book_title parameters can lead to SQL injection. The vulnerability is remotely exploitable and public exploit code is available. The CVSS score is 6.3, indicating medium severity.