CVE-2025-8946: projectworlds Online Notes Sharing Platform login.php sql injection
A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8946?
CVE-2025-8946 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2025-8946?
To mitigate CVE-2025-8946, sanitize and validate user inputs in the /login.php file to prevent SQL injection.
Who is affected by CVE-2025-8946?
CVE-2025-8946 affects users of the Projectworlds Online Notes Sharing Platform version 1.0.
What type of vulnerability is CVE-2025-8946?
CVE-2025-8946 is an SQL injection vulnerability that allows remote attackers to manipulate database queries.
Can CVE-2025-8946 be exploited remotely?
Yes, CVE-2025-8946 can be exploited remotely, making it a critical security concern.