CVE-2025-14210

CriticalCVSS 9.8/10Last modified Oct 7, 2026

Description

A security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /delete_member.php. Such manipulation of the argument user_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
projectworlds	Advanced Library Management System	1.0

References

https://github.com/rassec2/dbcve/issues/9Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.334653Permissions Required, VDB Entry
https://vuldb.com/?id.334653Third Party Advisory, VDB Entry
https://vuldb.com/?submit.700948Third Party Advisory, VDB Entry

Timeline

Published: Dec 8, 2025
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-142119.8A vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functiona CVE-2025-142129.8A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the f CVE-2025-142138.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to th CVE-2025-142148.8A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /section_edit1.php. CVE-2025-142159.8A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The CVE-2025-142169.8A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewse CVE-2025-142179.8A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Suc CVE-2025-142189.8A security flaw has been discovered in code-projects Currency Exchange System 1.0. The affected element is an unknown function of the file /CVE-2025-142197.2A weakness has been identified in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file CVE-2025-142204.3A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component File Upload. The manipu CVE-2025-142215.4A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The mani CVE-2025-142228.8A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_