CVE-2025-3245: A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Mana...

Summary

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Management/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may be...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
angeljudesuarez	library_management_system	<= 1.0 `cpe:2.3:a:angeljudesuarez:library_management_system::::::::`

Original advisory text

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Mana...

A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Management/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

References

https://itsourcecode.com/ Product
https://vuldb.com/?ctiid.303272 Permissions Required VDB Entry
https://vuldb.com/?id.303272 Third Party Advisory VDB Entry
https://vuldb.com/?submit.548087 Exploit Third Party Advisory VDB Entry
https://github.com/wlingze/IRify_scan/issues/1 Exploit Issue Tracking Third Party Advisory