projectworlds

Records253All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical73CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

projectworlds records in CISA KEV

No projectworlds vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced Library Management System 17 records HIGH Online Examination System 16 records HIGH Online Time Table Generator 15 records HIGH Life Insurance Management System 14 records HIGH Travel Management System 14 records HIGH Online Food Ordering System 13 records HIGH Online Book Store Project In Php 10 records MEDIUM Online Lawyer Management System 10 records HIGH

Records

253 records

TI-2024-37860 CVE-2024-57328 · GHSA-x4pr-pf8x-7x89

A SQL Injection vulnerability exists in the login form of Online Food Ordering System…

HIGH 82

A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00579 Published 2025-01-23 No fix listed CWE-89

TI-2024-34328 CVE-2024-51327 · GHSA-hm22-mpqr-wp46

SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows…

HIGH 82

SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2024-11-04 No fix listed CWE-89

TI-2024-28650 CVE-2024-42843 · GHSA-2p7q-76m8-h2pg

Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.

HIGH 82

Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2024-08-15 No fix listed CWE-89

TI-2023-26556 CVE-2023-48718 · GHSA-62v3-x9j5-g8rj

Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2023-12-21 No fix listed CWE-89

TI-2023-26529 CVE-2023-48689 · GHSA-7ff9-r6g6-8956

Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00671 Published 2023-12-21 No fix listed CWE-89

TI-2023-24299 CVE-2023-45341 · GHSA-8v89-jjrc-vc25

Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24141 CVE-2023-45111 · GHSA-3r2p-99p3-62vg

Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24076 CVE-2023-45019 · GHSA-f38r-jrwh-28gc

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24075 CVE-2023-45018 · GHSA-fc2p-qgr6-g55f

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24074 CVE-2023-45015 · GHSA-4gfq-3jg9-qhqx

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24073 CVE-2023-45012 · GHSA-r6w6-q776-2fqr

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2023-11-02 No fix listed CWE-89

TI-2023-23704 CVE-2023-44166 · GHSA-q5gr-85c7-4gh4

Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00976 Published 2023-09-28 No fix listed CWE-89

TI-2023-23703 CVE-2023-44164 · GHSA-xr9c-w7f8-3p75

Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00976 Published 2023-09-28 No fix listed CWE-89

TI-2023-23702 CVE-2023-44163 · GHSA-f5m6-72fr-4rwj

Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00976 Published 2023-09-28 No fix listed CWE-89

TI-2023-23116 CVE-2023-43144 · GHSA-q2qc-fw8v-w87w

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.

HIGH 82

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01094 Published 2023-09-22 No fix listed CWE-89

TI-2023-23048 CVE-2023-43013 · GHSA-4fv5-wjqm-7f2r

Asset Management System v1.0 - Unauthenticated SQL Injection (SQLi)

HIGH 82

Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00863 Published 2023-09-28 No fix listed CWE-89

TI-2023-04653 CVE-2023-5053 · GHSA-v25g-4whw-5x27

SQL Injection in hospital-management-system-in-php 378c157 in index.php

HIGH 82

Hospital management system version 378c157 allows to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01091 Published 2023-09-28 No fix listed CWE-89

TI-2023-04606 CVE-2023-5004 · GHSA-c2c3-654f-6p4q

Hospital-management-system-in-php 378c157 - Blind SQL Injection

HIGH 82

Hospital management system version 378c157 allows to bypass authentication.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01091 Published 2023-09-28 No fix listed CWE-89

TI-2024-34224 CVE-2024-51060 · GHSA-7368-g948-r7pg

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.

HIGH 80

Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00455 Published 2024-10-31 No fix listed CWE-89

TI-2025-43042 CVE-2025-70146 · GHSA-5pqm-c33h-22jc

Missing authentication in multiple administrative action scripts under /admin/ in…

HIGH 78

Missing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds Online Time Table Generator 1.0 allows remote attackers to perform unauthorized administrative operations (e.g.,adding recor…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00638 Published 2026-02-18 No fix listed CWE-306

TI-2024-15197 CVE-2024-22983 · GHSA-9hcj-pv58-28wg

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0…

HIGH 76

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00807 Published 2024-02-28 No fix listed CWE-89

TI-2024-00721 CVE-2024-0783 · GHSA-rxj5-22xc-hccm

Project Worlds Online Admission System documents.php unrestricted upload

HIGH 75

A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01248 Published 2024-01-22 No fix listed CWE-434

TI-2024-00670 CVE-2024-0730 · GHSA-xg6g-4cpc-5wf2

Project Worlds Online Time Table Generator course_ajax.php sql injection

HIGH 75

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00591 Published 2024-01-19 No fix listed CWE-89

TI-2024-00457 CVE-2024-0498 · GHSA-r727-8w48-r46x

Project Worlds Lawyer Management System searchLawyer.php sql injection

HIGH 75

A vulnerability was found in Project Worlds Lawyer Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.005 Published 2024-01-13 No fix listed CWE-89

TI-2023-04773 CVE-2023-5185 · GHSA-jv2q-4pxc-v47p

Gym Management System Project v1.0 - Insecure File Upload

HIGH 74

Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server ho…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.01476 Published 2023-09-28 No fix listed CWE-434

Open these records in search →