Vulnerabilities (CVE)

Filtered by vendor Projectworlds Subscribe
Filtered by product Visitor Management System In Php
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-25760 1 Projectworlds 1 Visitor Management System In Php 2022-01-01 6.5 MEDIUM 8.8 HIGH
Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attacker can append SQL queries to the input to extract sensitive information from the database.