Library System 1.0 SQL Injection

Posted on 27 September 2021

Library System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Aitor Herrero in January of 2021.