CVE-2025-3175: High SQL Injection in Project Worlds Lawyer System
CVE-2025-3175 is a High SQL injection in Project Worlds Lawyer System via /save_user_edit_profile.php. No fix listed, so restrict access and fix the query.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-3175 is a High SQL injection in Project Worlds Lawyer System via /save_user_edit_profile.php. No fix listed, so restrict access and fix the query.
CVE-2025-3174 is a High SQL injection in Online Lawyer Management System via /searchLawyer.php. No fix is listed, so limit access and use bound queries.
CVE-2025-3173 is a High SQL injection in Online Lawyer Management System via /save_booking.php. No fix is listed, so limit access and use bound queries.
CVE-2025-3172 is a High SQL injection in Online Lawyer Management System via /lawyer_booking.php. No fix is listed, so limit access and use bound queries.
CVE-2025-3171 is a High SQL injection in Online Lawyer Management System via /approve_lawyer.php. No fix is listed, so limit access and use bound queries.
CVE-2025-3170 is a High SQL injection in Online Lawyer Management System via /admin_user.php. No fix is listed, so limit access and use bound queries.
CVE-2025-3168 is a High SQL injection in Time Table Generator System via /admin/edit-class.php. No fix is listed, so limit access and use bound queries.
CVE-2025-31651 is a Critical rewrite rule bypass in Apache Tomcat. Upgrade to 11.0.6, 10.1.40 or 9.0.104 if you enforce security rules with rewrites.
CVE-2025-3164 is a Medium code injection in SuperSonic up to 0.9.8, in the database test connection. No fix is confirmed, so limit admin access.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.