CVE-2025-2661

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-89

Affected software

Vendor	Product	Versions
Project Worlds	Online Time Table Generator	1.0

References

https://github.com/ydnd/cve/issues/9Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.300677Permissions Required, VDB Entry
https://vuldb.com/?id.300677Third Party Advisory, VDB Entry
https://vuldb.com/?submit.520484Third Party Advisory, VDB Entry

Timeline

Published: Mar 23, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-266109.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered CVE-2025-266119.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered CVE-2025-266129.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered CVE-2025-266139.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was di CVE-2025-266148.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered CVE-2025-266157.5WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovere CVE-2025-266167.5WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovere CVE-2025-266179.8WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered CVE-2025-266187.0Erlang is a programming language and runtime system for building massively scalable soft real-time systems with requirements on high availab CVE-2025-266196.1Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. In `vega` 5.30.0 CVE-2025-26628.8A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown func CVE-2025-266206.3Duende.AccessTokenManagement is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. Duende.AccessTokenManagement con