CVE-2025-57119

CriticalCVSS 9.8/10Last modified Nov 7, 2026

Description

An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-250

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 16, 2025
Last modified
Nov 7, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-57127.3A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulneCVE-2025-57135.4A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown CVE-2025-571308.8An Incorrect Access Control vulnerability in the user management component of ZwiiCMS up to v13.6.07 allows a remote, authenticated attackerCVE-2025-57144.3A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affects an unknown part oCVE-2025-571409.8rsbi-pom 4.7 is vulnerable to SQL Injection in the /bi/service/model/DatasetService path.CVE-2025-571419.8rsbi-os 4.7 is vulnerable to Remote Code Execution (RCE) in sqlite-jdbc.CVE-2025-571455.4A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails tCVE-2025-571468.1phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter.CVE-2025-571477.5A SQL Injection vulnerability was found in phpgurukul Complaint Management System 2.0. The vulnerability is due to lack of input validation CVE-2025-571489.1phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension valiCVE-2025-571496.5phpgurukul Complaint Management System 2.0 is vulnerable to SQL Injection in /complaint-details.php via the cid parameter.CVE-2025-57156.4A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of t
CVE-2025-57119: Critical severity, CVSS 9.8 | Vulnix