Projectworlds
Page 2 of 2 — Projectworlds CVEs from a corpus of 107, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3174 | High | 7.3 | 2025-04-03 | A vulnerability has been found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown f… |
CVE-2025-3173 | High | 7.3 | 2025-04-03 | A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file… |
CVE-2025-3171 | High | 7.3 | 2025-04-03 | A vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0. This vulnerability affects unknown code of the file /ap… |
CVE-2025-3170 | High | 7.3 | 2025-04-03 | A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /admin_us… |
CVE-2025-3042 | Medium | 6.3 | 2025-04-01 | A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /studen… |
CVE-2025-3041 | Medium | 6.3 | 2025-04-01 | A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/update… |
CVE-2025-3040 | Medium | 6.3 | 2025-03-31 | A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionalit… |
CVE-2025-2662 | Medium | 6.3 | 2025-03-23 | A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown function of the file st… |
CVE-2025-2661 | High | 7.3 | 2025-03-23 | A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2025-2660 | High | 7.3 | 2025-03-23 | A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2025-2659 | High | 7.3 | 2025-03-23 | A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /stude… |
CVE-2025-2657 | High | 7.3 | 2025-03-23 | A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functi… |
CVE-2025-2067 | High | 7.3 | 2025-03-07 | A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the f… |
CVE-2025-2066 | High | 7.3 | 2025-03-07 | A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the… |
CVE-2025-2065 | High | 7.3 | 2025-03-07 | A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /e… |
CVE-2025-2064 | High | 7.3 | 2025-03-07 | A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown… |
CVE-2025-2063 | High | 7.3 | 2025-03-07 | A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2025-2062 | High | 7.3 | 2025-03-07 | A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clien… |
CVE-2025-1965 | High | 7.3 | 2025-03-05 | A vulnerability classified as critical has been found in projectworlds Online Hotel Booking 1.0. Affected is an unknown function of the file /admin/login.php… |
CVE-2025-1964 | High | 7.3 | 2025-03-05 | A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been rated as critical. This issue affects some unknown processing of the file /boo… |
CVE-2025-1963 | High | 7.3 | 2025-03-05 | A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /res… |
CVE-2025-1962 | High | 7.3 | 2025-03-05 | A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been classified as critical. This affects an unknown part of the file /admin/addroo… |
CVE-2024-57328 | Critical | 9.8 | 2025-01-23 | A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0. The vulnerability arises because the input fields username and pass… |
CVE-2024-12950 | Medium | 6.3 | 2024-12-26 | A vulnerability was found in code-projects/projectworlds Travel Management System 1.0. It has been rated as critical. This issue affects some unknown processin… |
CVE-2024-11059 | Medium | 6.3 | 2024-11-11 | A vulnerability was found in Project Worlds Free Download Online Shopping System up to 192.168.1.88. It has been rated as critical. This issue affects some unk… |
CVE-2024-51328 | Medium | 6.1 | 2024-11-04 | Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t… |
CVE-2024-51327 | Critical | 9.8 | 2024-11-04 | SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'usern… |
CVE-2024-51326 | High | 7.5 | 2024-11-04 | SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in delete… |
CVE-2024-10735 | Medium | 6.3 | 2024-11-03 | A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2024-10734 | Medium | 6.3 | 2024-11-03 | A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file… |
CVE-2024-51060 | Critical | 9.1 | 2024-10-31 | Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter. |
CVE-2024-10447 | Medium | 6.3 | 2024-10-28 | A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2024-10446 | Medium | 6.3 | 2024-10-28 | A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable… |
CVE-2024-10433 | Low | 3.5 | 2024-10-28 | A vulnerability was found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as problematic. Affected by this issue is some unknown functio… |
CVE-2024-10432 | High | 7.3 | 2024-10-28 | A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-10425 | Medium | 6.3 | 2024-10-27 | A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this issue is some unknown functional… |
CVE-2024-10424 | Medium | 6.3 | 2024-10-27 | A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2024-10423 | Medium | 6.3 | 2024-10-27 | A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the fi… |
CVE-2024-45986 | Medium | 5.4 | 2024-09-26 | A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered with a mali… |
CVE-2024-42843 | Critical | 9.8 | 2024-08-15 | Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php. |
CVE-2024-36597 | High | 8.8 | 2024-06-14 | Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php. |
CVE-2024-22983 | High | 8.1 | 2024-02-28 | SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in t… |
CVE-2024-22922 | Critical | 9.8 | 2024-01-25 | An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the PO… |
CVE-2024-0730 | Medium | 6.3 | 2024-01-19 | A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file course… |
CVE-2024-0726 | Medium | 4.3 | 2024-01-19 | A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing… |
CVE-2024-0650 | Medium | 4.3 | 2024-01-18 | A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file d… |
CVE-2024-0498 | Medium | 6.3 | 2024-01-13 | A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functi… |
CVE-2024-0266 | Medium | 4.3 | 2024-01-07 | A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the componen… |
CVE-2024-0262 | Low | 2.4 | 2024-01-07 | A vulnerability was found in Online Job Portal 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /Admin/News… |
CVE-2023-48716 | Critical | 9.8 | 2023-12-21 | Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_id' parameter of the add_classes.php… |
CVE-2023-48689 | Critical | 9.8 | 2023-12-21 | Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' parameter of the train.php resource does… |
CVE-2023-48687 | Critical | 9.8 | 2023-12-21 | Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reservation.php resource d… |
CVE-2023-48685 | Critical | 9.8 | 2023-12-21 | Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.php resource does not… |
CVE-2023-44482 | High | 8.8 | 2023-12-21 | Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin/setleaves… |
CVE-2023-44481 | High | 8.8 | 2023-12-21 | Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearnleave' parameter of the admin/setleaves… |
CVE-2023-45121 | High | 8.8 | 2023-12-21 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resourc… |
CVE-2023-45120 | High | 8.8 | 2023-12-21 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' parameter of the /update.php?q=quiz&step=2 reso… |
CVE-2023-45119 | High | 8.8 | 2023-12-21 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does… |
CVE-2023-45118 | High | 8.8 | 2023-12-21 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not… |
CVE-2023-45117 | High | 8.8 | 2023-12-21 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource … |
CVE-2023-45116 | High | 8.8 | 2023-12-21 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does n… |
CVE-2023-45115 | High | 8.8 | 2023-12-21 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource d… |
CVE-2023-48434 | Critical | 9.8 | 2023-12-20 | Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the reg_action.php resou… |
CVE-2023-48433 | Critical | 9.8 | 2023-12-20 | Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the login_action.php res… |
CVE-2023-46800 | Critical | 9.8 | 2023-11-07 | Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the view_profile.php resource do… |
CVE-2023-46793 | Critical | 9.8 | 2023-11-07 | Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register()' function of th… |
CVE-2023-46789 | Critical | 9.8 | 2023-11-07 | Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart param… |
CVE-2023-46788 | Critical | 9.8 | 2023-11-07 | Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter in the 'uploadphoto()' function of… |
CVE-2023-46787 | Critical | 9.8 | 2023-11-07 | Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource… |
CVE-2023-46785 | Critical | 9.8 | 2023-11-07 | Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partner_preference.php resou… |
CVE-2023-46679 | Critical | 9.8 | 2023-11-07 | Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname_email' parameter of the index.php resource does… |
CVE-2023-46677 | Critical | 9.8 | 2023-11-07 | Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname' parameter of the sign-up.php resource does not… |
CVE-2023-45347 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router… |
CVE-2023-45346 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php… |
CVE-2023-45345 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router… |
CVE-2023-45338 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php reso… |
CVE-2023-45344 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router… |
CVE-2023-45343 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id' parameter of the routers/ticket-messa… |
CVE-2023-45342 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router… |
CVE-2023-45341 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.ph… |
CVE-2023-45340 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details-router.p… |
CVE-2023-45336 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php re… |
CVE-2023-45334 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php… |
CVE-2023-45325 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php… |
CVE-2023-45323 | Critical | 9.8 | 2023-11-02 | Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php reso… |
CVE-2023-45203 | Medium | 6.1 | 2023-11-01 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redir… |
CVE-2023-45202 | Medium | 6.1 | 2023-11-01 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redire… |
CVE-2023-45201 | Medium | 6.1 | 2023-11-01 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redir… |
CVE-2023-44484 | Medium | 6.1 | 2023-10-31 | Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php… |
CVE-2023-44480 | High | 8.8 | 2023-10-27 | Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleav… |
CVE-2023-44267 | Critical | 9.8 | 2023-10-26 | Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not valida… |
CVE-2023-44174 | Medium | 6.4 | 2023-09-28 | Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability. |
CVE-2023-44166 | Critical | 9.8 | 2023-09-28 | The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database. |
CVE-2023-44164 | Critical | 9.8 | 2023-09-28 | The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database. |
CVE-2023-44163 | Critical | 9.8 | 2023-09-28 | The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database. |
CVE-2023-43014 | High | 8.8 | 2023-09-28 | Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page… |
CVE-2023-5185 | Critical | 9.1 | 2023-09-28 | Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authent… |
CVE-2023-5053 | Critical | 9.8 | 2023-09-28 | Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. |
CVE-2023-5004 | Critical | 9.8 | 2023-09-28 | Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. |
CVE-2023-44173 | Medium | 5.4 | 2023-09-28 | Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability. |