CVE-2025-8948 - projectworlds Visitor Management System front.php sql injection

Back Back to CVE browser

MEDIUM

projectworlds Visitor Management System front.php sql injection

Published Aug 14, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 0.42%

Description

A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Projectworlds Product Visitor Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Projectworlds

Visitor Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24674
Advisory
https://github.com/guoma-book/CVE/issues/5
exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.319914
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319914
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.632003
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24674		Advisory
https://github.com/guoma-book/CVE/issues/5		exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.319914		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319914		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.632003		third-party-advisoryThird Party AdvisoryVDB Entry