CVE-2020-28073
9.8
CRITICAL · CVSS 3.1 · EPSS 2.8% (pctl 86)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
SourceCodester Library Management System 1.0 is affected by SQL Injection allowing an attacker to bypass the user authentication and impersonate any user on the system.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.81% — more likely to be exploited than 86% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2020-12-23 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| library management system project | library management system |
References
- http://packetstormsecurity.com/files/160606/Library-Management-System-1.0-SQL-Injection.html
- https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html
- http://packetstormsecurity.com/files/160606/Library-Management-System-1.0-SQL-Injection.html
- https://www.sourcecodester.com/php/14545/online-library-management-system-phpmysqli-full-source-code-2020.html
→ the Explorer · watch your stack · NVD