Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnerability via the component ajax.php.
CWE-434 Unrestricted Upload of File with Dangerous Type