CVE-2025-5008: projectworlds Online Time Table Generator add_teacher.php sql injection
A vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addteacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5008?
CVE-2025-5008 has been rated as critical due to its potential for SQL injection attacks.
How do I fix CVE-2025-5008?
To fix CVE-2025-5008, sanitize and validate all user inputs in the /admin/add_teacher.php functionality to prevent SQL injection.
What type of vulnerability is CVE-2025-5008?
CVE-2025-5008 is classified as an SQL injection vulnerability.
Which software is affected by CVE-2025-5008?
CVE-2025-5008 affects the projectworlds Online Time Table Generator version 1.0.
What can happen if CVE-2025-5008 is exploited?
Exploitation of CVE-2025-5008 can allow attackers to manipulate database queries, potentially leading to unauthorized data access.