CVE-2025-3175 MEDIUM

CVE-2025-3175: Project Worlds Online Lawyer Management System save_user_edit_profile.php sql injection

Vendor Project Worlds
Product Online Lawyer Management System
Weakness CWE-89 · SQLi
Published April 3, 2025
Last update April 3, 2025
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /save_user_edit_profile.php. The manipulation of the argument first_Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

April 3, 2025 CVE published
April 3, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-34386 Fleet vulnerable to SQL injection in MDM bootstrap package by authenticated team or global admin CVE-2025-4247 SourceCodester Simple To-Do List System delete_task.php sql injection CVE-2023-22491 gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection CVE-2024-12946 1000 Projects Attendance Tracking Management System admin_action.php sql injection CVE-2022-26349 Delta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashx