CVE-2025-8247: Projectworlds Online Admission System admin.php sql injection
Published Jul 27, 2025
·Updated
A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the file /admin.php. The manipulation of the argument markof leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
Projectworlds Online Admission System
Projectworlds Online Admission System=1.0
Event History
Jul 27, 2025
CVE Published
via MITRE·11:32 PM
Data Sourced
via MITRE·11:32 PM
DescriptionSeverityWeakness
Jul 28, 2025
Data Sourced
via NVD·12:15 AM
DescriptionSeverityWeaknessAffected Software
Jun 16, 58473
Event
via NVD·11:53 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-8247?
CVE-2025-8247 is classified as critical due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2025-8247?
To fix CVE-2025-8247, validate and sanitize all inputs in the /admin.php file to prevent SQL injection.
3
What software is affected by CVE-2025-8247?
CVE-2025-8247 affects Projectworlds Online Admission System version 1.0.
4
Can CVE-2025-8247 be exploited remotely?
Yes, CVE-2025-8247 can be exploited remotely.
5
What kind of attack does CVE-2025-8247 facilitate?
CVE-2025-8247 facilitates SQL injection attacks through manipulation of the 'markof' argument.