Vendors / projectworlds Records 253 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 73
CVSS high 22
Exploited now projectworlds records in CISA KEV No projectworlds vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00804 · Published 2024-11-04 · No fix listed CWE-89
Priority HIGH 72
A vulnerability was determined in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-09-03 · No fix listed CWE-74
Priority HIGH 72
A vulnerability was found in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00438 · Published 2025-09-03 · No fix listed CWE-74
Priority HIGH 72
SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00899 · Published 2024-11-04 · No fix listed CWE-89
Priority HIGH 70
A security flaw has been discovered in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00458 · Published 2025-09-03 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was identified in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00462 · Published 2025-09-03 · No fix listed CWE-74
Priority HIGH 70
A vulnerability has been found in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00462 · Published 2025-09-03 · No fix listed CWE-74
Priority HIGH 70
A vulnerability has been found in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00513 · Published 2025-08-15 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was identified in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00478 · Published 2025-08-15 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was determined in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00478 · Published 2025-08-15 · No fix listed CWE-74
Priority HIGH 70
A vulnerability was found in projectworlds Travel Management System 1.0.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00478 · Published 2025-08-15 · No fix listed CWE-74
Priority MEDIUM 60
Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00398 · Published 2024-11-04 · No fix listed CWE-79
Priority MEDIUM 48
Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code executio…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03738 · Published 2020-08-27 · No fix listed CWE-425
Priority LOW 30
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01533 · Published 2021-05-17 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
73 22 158 0 0
THREATIST.IORead the docs