PT-2025-31743 · Unknown · Projectworlds Online Admission System
Tqlfront
·
Published
2025-08-02
·
Updated
2025-08-03
·
CVE-2025-8471
Tqlfront
·
Published
2025-08-02
·
Updated
2025-08-03
·
CVE-2025-8471
7.5
High
Base vector | Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions:
ProjectWorlds Online Admission System version 1.0
Description:
A critical issue exists in the processing of the `/adminlogin.php` file. Manipulation of the `a id` argument can lead to SQL injection. The attack can be initiated remotely, and the exploit has been publicly disclosed.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
SQL injection
Special Elements Injection