CVE-2025-2661: Project Worlds Online Time Table Generator index.php sql injection
A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2661?
CVE-2025-2661 is classified as a critical vulnerability due to its potential impact and remote exploitation capabilities.
How does CVE-2025-2661 affect Project Worlds Online Time Table Generator?
CVE-2025-2661 affects the processing of the file /staff/index.php, where manipulation of the 'e' argument can lead to SQL injection.
Can CVE-2025-2661 be exploited remotely?
Yes, CVE-2025-2661 allows for remote exploitation of the vulnerability.
What are the potential consequences of exploiting CVE-2025-2661?
Exploiting CVE-2025-2661 could allow an attacker to execute arbitrary SQL queries on the database, potentially compromising data integrity and confidentiality.
How can I mitigate CVE-2025-2661 in my application?
To mitigate CVE-2025-2661, it is advisable to implement parameterized queries and validate all user inputs before processing.