Unrated severityNVD Advisory· Published May 15, 2025· Updated May 15, 2025
projectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injection
CVE-2025-4706
Description
A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3b_yearwiseVisit.php. The manipulation of the argument Visit_year leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 1.0
- projectworlds/Online Examination Systemv5Range: 1.0
Patches
Vulnerability mechanics
References
4- github.com/Welhelm666/666/issues/2mitreexploitissue-tracking
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.