CVE-2025-4058: Projectworlds Online Examination System Bloodgroop_process.php sql injection
Published Apr 29, 2025
·Updated
A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroopprocess.php. The manipulation of the argument PatBloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Projectworlds Online Examination System
Projectworlds Online Examination System=1.0
Event History
Apr 29, 2025
CVE Published
via MITRE·11:31 AM
Data Sourced
via MITRE·11:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Apr 14, 57299
Event
via FIRST·01:14 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-4058?
CVE-2025-4058 is classified as a critical vulnerability.
2
What type of vulnerability is CVE-2025-4058?
CVE-2025-4058 is a SQL injection vulnerability.
3
Which software is affected by CVE-2025-4058?
CVE-2025-4058 affects Projectworlds Online Examination System version 1.0.
4
How do I fix CVE-2025-4058?
To fix CVE-2025-4058, validate and sanitize user input to prevent SQL injection.
5
Can CVE-2025-4058 be exploited remotely?
Yes, CVE-2025-4058 can be exploited remotely.