CVE-2026-36873 - Vulnerability Analysis

Overview

Sourcecodester Basic Library System v1.0 contains a sql injection caused by improper sanitization in /librarysystem/load_admin.php, letting attackers execute arbitrary SQL commands remotely, exploit requires crafted requests.

Severity & Score

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data disclosure, modification, or full database compromise.

Mitigation

Update to the latest version or apply patches to fix SQL injection in /librarysystem/load_admin.php.

References

• https://github.com/Thirtypenny77/bug_report/blob/main/sourcecodester/basic-library-system/SQL-2.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner