CVE-2025-3173: Project Worlds Online Lawyer Management System save_booking.php sql injection
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /savebooking.php. The manipulation of the argument lawyerid/description leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3173?
CVE-2025-3173 is classified as a critical vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-3173?
To fix CVE-2025-3173, it is recommended to sanitize user input and implement prepared statements in the code handling the /save_booking.php file.
What software is affected by CVE-2025-3173?
CVE-2025-3173 affects Project Worlds Online Lawyer Management System version 1.0.
Can CVE-2025-3173 lead to data breaches?
Yes, CVE-2025-3173 can lead to data breaches by allowing attackers to execute arbitrary SQL queries to manipulate the database.
How can I protect my system from vulnerabilities like CVE-2025-3173?
To protect your system from vulnerabilities like CVE-2025-3173, ensure regular software updates, apply security patches, and conduct security audits.