Projectworlds Advanced Library Management System 1.0 contains a SQL injection vulnerability in the /borrow.php file via the roll_number parameter. This vulnerability allows remote attackers with low privileges to manipulate SQL queries, potentially leading to data confidentiality, integrity, and availability impacts. Public exploit code is available, but no official patch or remediation has been provided yet.