CVE-2025-6134

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument client_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.

• CWE-74
• CWE-89
• CWE-89

• https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertClient_client_id.mdExploit, Third Party Advisory
• https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertClient_client_id.md#pocExploit, Third Party Advisory
• https://vuldb.com/?ctiid.312603Permissions Required, VDB Entry
• https://vuldb.com/?id.312603Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.592839Third Party Advisory, VDB Entry

Published

Jun 16, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-61314A reflected cross-site scripted (XSS) vulnerability in the d…7.3
• CVE-2025-61318Emlog Pro 2.5.20 has an arbitrary file deletion vulnerabilit…9.1
• CVE-2025-61319ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scri…6.1
• CVE-2025-6132A vulnerability has been found in Chanjet CRM 1.0 and classi…9.8
• CVE-2025-6133A vulnerability was found in Projectworlds Life Insurance Ma…9.8
• CVE-2025-61330A hard-coded weak password vulnerability has been discovered…6.5
• CVE-2025-6135A vulnerability was found in Projectworlds Life Insurance Ma…9.8
• CVE-2025-6136A vulnerability was found in Projectworlds Life Insurance Ma…9.8
• CVE-2025-6137A vulnerability classified as critical has been found in TOT…8.8
• CVE-2025-6138A vulnerability classified as critical was found in TOTOLINK…8.8
• CVE-2025-61385SQL injection vulnerability in tlocke pg8000 1.31.4 allows r…9.6
• CVE-2025-6139A vulnerability, which was classified as problematic, has be…3.9