CVE-2025-3170: Project Worlds Online Lawyer Management System admin_user.php sql injection
A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /adminuser.php. The manipulation of the argument blockid/unblockid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3170?
CVE-2025-3170 is classified as a critical vulnerability due to its potential for SQL injection.
How do I fix CVE-2025-3170?
To fix CVE-2025-3170, validate and sanitize the input parameters in the /admin_user.php file to prevent SQL injection.
What type of vulnerability is CVE-2025-3170?
CVE-2025-3170 is a SQL injection vulnerability that exploits the manipulation of the block_id/unblock_id parameters.
Which software is affected by CVE-2025-3170?
CVE-2025-3170 affects Project Worlds Online Lawyer Management System 1.0.
Can CVE-2025-3170 be exploited remotely?
Yes, CVE-2025-3170 can potentially be exploited remotely by manipulating specific arguments.