PoC Index

CVE-2025-55444

CRITICAL 9.8EPSS 0.8%

A SQL injection vulnerability exists in the id2 parameter of the cancel_booking.php page in Online Artwork and Fine Arts MCA Project 1.0. A remote attacker can inject arbitrary SQL queries, leading to database enumeration and potential remote code execution.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.83% chance of exploitation in the next 30 days, 55th percentile
Published
2025-08-20
Updated
2025-08-21

Proof-of-concept exploits (1)

References

Related