Threats tagged 'ghsa-vr8h-pj9q-293w'

A SQL injection vulnerability exists in projectworlds Visitor Management System 1.0 within the mysqli_query function of actionpage.php. This flaw allows remote attackers to manipulate the 'purpose' argument to execute arbitrary SQL commands. Exploit code has been published, and the vulnerability has a high severity rating with a CVSS score of 7.3.