CVE-2020-25760

Name of the Vulnerable Software and Affected Versions Projectworlds Visitor Management System version 1.0

Description The issue allows for SQL Injection due to a lack of input validation on the rid parameter in the front.php file. This enables an attacker to append SQL queries to the input, potentially extracting sensitive information from the database.

Recommendations For version 1.0, ensure input validation is performed on the rid parameter in the front.php file to prevent SQL Injection attacks. As a temporary workaround, consider restricting access to the front.php file until a patch is available.