Description
A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0. This affects an unknown part of the file /admin.php. The manipulation of the argument markof leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Projectworlds | Online Admission System | 1.0 |
References
- https://github.com/ht4266394/cve/issues/1Exploit, Issue Tracking
- https://vuldb.com/?ctiid.317835Permissions Required, VDB Entry
- https://vuldb.com/?id.317835Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.622711Third Party Advisory, VDB Entry
Timeline
- Published
- Jul 28, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed