CVE-2025-5004: projectworlds Online Time Table Generator add_course.php sql injection
A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/addcourse.php. The manipulation of the argument c/subname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5004?
CVE-2025-5004 is classified as critical due to its potential for SQL injection and remote exploitation.
How do I fix CVE-2025-5004?
To fix CVE-2025-5004, ensure to sanitize inputs in the /admin/add_course.php file and implement prepared statements for database queries.
What is the impact of CVE-2025-5004?
The impact of CVE-2025-5004 includes unauthorized database access and manipulation of data due to SQL injection vulnerabilities.
Which software is affected by CVE-2025-5004?
CVE-2025-5004 affects projectworlds Online Time Table Generator version 1.0.
Can CVE-2025-5004 be exploited remotely?
Yes, CVE-2025-5004 can be exploited remotely, allowing attackers to execute SQL commands from a remote location.