CVE-2025-4836: Projectworlds Life Insurance Management System deleteAgent.php sql injection
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /deleteAgent.php. The manipulation of the argument agentid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4836?
CVE-2025-4836 has been rated as critical.
How does the CVE-2025-4836 vulnerability occur?
CVE-2025-4836 occurs due to SQL injection in the /deleteAgent.php file through manipulation of the agent_id argument.
What systems are affected by CVE-2025-4836?
CVE-2025-4836 affects the Projectworlds Life Insurance Management System version 1.0.
How can I mitigate the risks of CVE-2025-4836?
To mitigate CVE-2025-4836, implement proper input validation and prepared statements in your database queries.
Is there a known exploit for CVE-2025-4836?
Yes, CVE-2025-4836 can be exploited by attackers through crafted requests targeting the vulnerable /deleteAgent.php script.