basic library system vulnerabilities and fixes

Recent CVEs affecting basic library system, with upgrade or downgrade steps. 3 tracked.

Also searched as: basiclibrarysystem.

basic library system has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-04-13. Highest priority: CVE-2026-36874 (score 18/100).

• CVE-2026-36874 LOW 2.7 DOWNGRADE Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.
• CVE-2026-36873 LOW 2.7 DOWNGRADE Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.
• CVE-2026-36872 LOW 2.7 DOWNGRADE Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.

FAQ

How do I fix basic library system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is basic library system being exploited right now?

None of the tracked basic library system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which basic library system CVE should I patch first?

CVE-2026-36874 currently ranks highest (18/100): Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php..

RSS feed for basic library system · ← Back to latest CVEs