Threats tagged 'ghsa-6g8m-p68x-665h'

A SQL injection vulnerability exists in projectworlds Visitor Management System 1.0 in the Login Endpoint's /img/user page.php file. The vulnerability allows remote attackers to manipulate the Username parameter in the mysqli_query function, potentially leading to unauthorized data access and modification. Public exploit code has been disclosed. The vulnerability has a high severity rating with a CVSS score of 7.3.