<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: library management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-9755: A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e</title><link>https://patchthecve.com/cve/CVE-2025-9755.html</link><guid>https://patchthecve.com/cve/CVE-2025-9755.html</guid><pubDate>Wed, 30 Sep 2026 23:10:00 +0000</pubDate><description>MEDIUM 4.3: A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24. This affects an unknown function of the file /index.php. The manipulation of the argument msg leads to cross site scripting. Remote exploitation of the attack is possible. The expl</description></item><item><title>CVE-2025-7210: A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical</title><link>https://patchthecve.com/cve/CVE-2025-7210.html</link><guid>https://patchthecve.com/cve/CVE-2025-7210.html</guid><pubDate>Wed, 17 Jun 2026 10:04:31 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profile_update.php. The manipulation of the argument photo leads to unrestricted upload. The attack may be launched r</description></item><item><title>CVE-2025-7190: A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0</title><link>https://patchthecve.com/cve/CVE-2025-7190.html</link><guid>https://patchthecve.com/cve/CVE-2025-7190.html</guid><pubDate>Wed, 17 Jun 2026 10:04:28 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/student_edit_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. Th</description></item><item><title>CVE-2025-3245: A vulnerability was found in itsourcecode Library Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2025-3245.html</link><guid>https://patchthecve.com/cve/CVE-2025-3245.html</guid><pubDate>Wed, 17 Jun 2026 09:19:30 +0000</pubDate><description>MEDIUM 6.3: A vulnerability was found in itsourcecode Library Management System 1.0. It has been rated as critical. Affected by this issue is the function Search of the file library_management/src/Library_Management/Forgot.java. The manipulation of the argument txtuname leads to sql injection. The attack may be</description></item><item><title>CVE-2025-2832: A vulnerability was found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff72</title><link>https://patchthecve.com/cve/CVE-2025-2832.html</link><guid>https://patchthecve.com/cve/CVE-2025-2832.html</guid><pubDate>Wed, 17 Jun 2026 09:07:41 +0000</pubDate><description>MEDIUM 4.3: A vulnerability was found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has</description></item><item><title>CVE-2025-2831: A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce9</title><link>https://patchthecve.com/cve/CVE-2025-2831.html</link><guid>https://patchthecve.com/cve/CVE-2025-2831.html</guid><pubDate>Wed, 17 Jun 2026 09:07:41 +0000</pubDate><description>MEDIUM 6.3: A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as critical. This vulnerability affects the function getBookList of the file /admin/bookList?page=1&amp;limit=10. The manipulation of the argument condition leads to </description></item><item><title>CVE-2024-12188: A vulnerability was found in 1000 Projects Library Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-12188.html</link><guid>https://patchthecve.com/cve/CVE-2024-12188.html</guid><pubDate>Wed, 17 Jun 2026 06:59:12 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in 1000 Projects Library Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /brains/stu.php. The manipulation of the argument useri leads to sql injection. The attack can be launched remotely. The </description></item><item><title>CVE-2024-12187: A vulnerability was found in 1000 Projects Library Management System 1.0</title><link>https://patchthecve.com/cve/CVE-2024-12187.html</link><guid>https://patchthecve.com/cve/CVE-2024-12187.html</guid><pubDate>Wed, 17 Jun 2026 06:59:12 +0000</pubDate><description>HIGH 7.3: A vulnerability was found in 1000 Projects Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /showbook.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploit has been discl</description></item></channel></rss>