CVE-2020-25760: SQL Injection
Published Sep 29, 2020
·Updated
Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attacker can append SQL queries to the input to extract sensitive information from the database.
Affected Software
2 affected components
Projectworlds Visitor Management System in PHP=1.0
Projectworlds Visitor Management System=1.0
Event History
Sep 29, 2020
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Sep 30, 2020
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2020-25760?
CVE-2020-25760 is a vulnerability in Projectworlds Visitor Management System in PHP 1.0 that allows SQL Injection.
2
What is the severity of CVE-2020-25760?
The severity of CVE-2020-25760 is high with a CVSS score of 8.8.
3
How does CVE-2020-25760 affect the software?
CVE-2020-25760 affects Projectworlds Visitor Management System in PHP 1.0.
4
What can an attacker do with CVE-2020-25760?
An attacker can append SQL queries to the 'rid' parameter to extract sensitive information from the database.
5
How can I fix CVE-2020-25760?
To fix CVE-2020-25760, it is recommended to perform input validation on the 'rid' parameter in the file front.php.