Library Management System version 1.0 suffers from a remote blind time-based SQL injection vulnerability. Continue reading...