NetSight
high8.1

CVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in t…

Impact

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint.

Affected products

VendorProductAffected versions
ProjectworldsVisitor Management System
Version 1.0

Weakness classification

References