CVE-2020-25760

Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection

published September 29, 2020

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attacker can append SQL queries to the input to extract sensitive information from the database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02169 · 82.1th percentile
Published
2020-09-29T19:00Z
EPSS history
Timeline
  • 29 SEP 19:00Z
    Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection
    cvelistv5