← Database

CVE-2025-12938

HIGH CVSS: 7.3 Published: 2025-11-10 Modified: 2026-06-17

Description

A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of the file /process_login.php. The manipulation of the argument keywords leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

Affected Platforms

Projectworlds Online Admission System

Weakness Type

CWE-74, CWE-89, CWE-89

References