CVE-2020-25760

HIGH

Visitor Management System in PHP 1.0 - SQL Injection (Authenticated)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-25760 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attacker can append SQL queries to the input to extract sensitive information from the database.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBVisitor Management System in PHP 1.0 - SQL Injection (Authenticated)ExploitDB exploitby Rahul RamkumarNot analyzed1 file
ExploitDB
PoC details

References

6