Projectworlds · Projectworlds Visitor Management System · CVE-2020-25760
**Name of the Vulnerable Software and Affected Versions**
Projectworlds Visitor Management System version 1.0
**Description**
The issue allows for SQL Injection due to a lack of input validation on the `rid` parameter in the front.php file. This enables an attacker to append SQL queries to the input, potentially extracting sensitive information from the database.
**Recommendations**
For version 1.0, ensure input validation is performed on the `rid` parameter in the front.php file to prevent SQL Injection attacks. As a temporary workaround, consider restricting access to the front.php file until a patch is available.