CVE-2025-3171: Project Worlds Online Lawyer Management System approve_lawyer.php sql injection
A vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0. This vulnerability affects unknown code of the file /approvelawyer.php. The manipulation of the argument unblockid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3171?
CVE-2025-3171 is classified as a critical vulnerability.
How does CVE-2025-3171 exploit the system?
CVE-2025-3171 exploits the system through SQL injection via the 'unblock_id' parameter in the '/approve_lawyer.php' file.
Can CVE-2025-3171 be exploited remotely?
Yes, CVE-2025-3171 can be exploited remotely.
What software is affected by CVE-2025-3171?
CVE-2025-3171 affects Project Worlds Online Lawyer Management System version 1.0.
How do I fix CVE-2025-3171?
To fix CVE-2025-3171, validate and sanitize inputs to the 'unblock_id' parameter in the impacted PHP file.