Medium severity6.3NVD Advisory· Published Nov 17, 2025· Updated Apr 29, 2026
CVE-2025-13255
CVE-2025-13255
Description
A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /book_search.php. Performing a manipulation of the argument book_pub/book_title results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:projectworlds:advanced_library_management_system:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:projectworlds:advanced_library_management_system:1.0:*:*:*:*:*:*:*
- (no CPE)range: = 1.0
Patches
Vulnerability mechanics
References
6- github.com/Wyg2002yx/cve/blob/main/003/report.mdnvdExploitThird Party Advisory
- github.com/Wyg2002yx/cve/blob/main/004/report.mdnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.