CVE-2025-4706

Affected software : ProjectWorlds Online Examination System 1.0. The vulnerability affects the file /Procedure3b_yearwiseVisit.php and is triggered by manipulating the Visit_year parameter. Root cause / vulnerability type : SQL injection due to improper handling of input in the affected PHP code....

CVE-2025-4706 projectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injection

A vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3byearwiseVisit.php. The manipulation of the argument Visityear leads to sql injection. The attack can be initiated remotely. T...