CVE-2025-3174: Project Worlds Online Lawyer Management System searchLawyer.php sql injection
A vulnerability has been found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /searchLawyer.php. The manipulation of the argument experience leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3174?
The severity of CVE-2025-3174 is classified as critical.
What kind of vulnerability is CVE-2025-3174?
CVE-2025-3174 is a SQL injection vulnerability affecting the /searchLawyer.php file in the Project Worlds Online Lawyer Management System.
How does CVE-2025-3174 affect the Project Worlds Online Lawyer Management System?
CVE-2025-3174 allows attackers to manipulate the experience argument in the /searchLawyer.php file, leading to SQL injection.
How can I fix CVE-2025-3174?
To fix CVE-2025-3174, validate and sanitize all input parameters before processing them in SQL queries.
What software versions are affected by CVE-2025-3174?
CVE-2025-3174 affects version 1.0 of the Project Worlds Online Lawyer Management System.