CVE-2025-4932: projectworlds Online Lawyer Management System lawyer_registation.php sql injection
A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Affected by this issue is some unknown functionality of the file /lawyerregistation.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4932?
CVE-2025-4932 is classified as a critical vulnerability.
What type of vulnerability is CVE-2025-4932?
CVE-2025-4932 is a SQL injection vulnerability affecting the email parameter in /lawyer_registration.php.
How can I fix CVE-2025-4932?
To fix CVE-2025-4932, validate and sanitize user inputs to prevent SQL injection attacks.
Which software is affected by CVE-2025-4932?
CVE-2025-4932 affects version 1.0 of the Projectworlds Online Lawyer Management System.
What are the potential impacts of exploiting CVE-2025-4932?
Exploiting CVE-2025-4932 could allow an attacker to execute arbitrary SQL queries, potentially compromising the entirety of the database.