Projectworlds
Page 3 of 3 — Projectworlds CVEs from a corpus of 236, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44173 | Medium | 5.4 | 2023-09-28 | Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability. |
CVE-2023-43740 | High | 8.8 | 2023-09-28 | Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowing an authenticate… |
CVE-2023-43013 | Critical | 9.8 | 2023-09-28 | Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an externa… |
CVE-2023-43144 | Critical | 9.8 | 2023-09-22 | Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. |
CVE-2023-3694 | Medium | 6.3 | 2023-07-17 | A vulnerability, which was classified as critical, has been found in SourceCodester/projectworlds House Rental and Property Listing 1.0. This issue affects som… |
CVE-2022-42066 | Medium | 6.1 | 2022-10-14 | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. |
CVE-2021-45852 | Medium | 5.3 | 2022-03-16 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient… |
CVE-2021-44866 | High | 7.5 | 2022-02-03 | An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can a… |
CVE-2021-46024 | Critical | 9.8 | 2022-01-23 | Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required. |
CVE-2021-46307 | Critical | 9.8 | 2022-01-21 | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. |
CVE-2021-43631 | Critical | 9.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php. |
CVE-2021-43630 | High | 8.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated maliciou… |
CVE-2021-43629 | Critical | 9.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php. |
CVE-2021-43628 | Critical | 9.8 | 2021-12-22 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php. |
CVE-2021-43158 | Medium | 4.3 | 2021-12-22 | In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart. |
CVE-2021-43157 | Critical | 9.8 | 2021-12-22 | Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php. |
CVE-2021-43156 | Medium | 6.5 | 2021-12-22 | In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book. |
CVE-2021-43155 | Critical | 9.8 | 2021-12-22 | Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php. |
CVE-2020-29205 | Medium | 6.1 | 2021-05-17 | XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field |
CVE-2020-19114 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary c… |
CVE-2020-19113 | Critical | 9.8 | 2021-05-06 | Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution. |
CVE-2020-19112 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary… |
CVE-2020-19111 | Critical | 9.8 | 2021-05-06 | Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtai… |
CVE-2020-19110 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitra… |
CVE-2020-19109 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary c… |
CVE-2020-19108 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code. |
CVE-2020-19107 | Critical | 9.8 | 2021-05-06 | SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. |
CVE-2020-27397 | High | 8.8 | 2020-12-23 | Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code e… |
CVE-2020-25761 | Medium | 6.1 | 2020-09-30 | Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can… |
CVE-2020-25760 | High | 8.8 | 2020-09-30 | Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attack… |
CVE-2020-23833 | Critical | 9.8 | 2020-09-15 | Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting… |
CVE-2020-24199 | Critical | 9.8 | 2020-09-09 | Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code executi… |
CVE-2020-24203 | Critical | 9.8 | 2020-08-27 | Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows… |
CVE-2020-24202 | Critical | 9.8 | 2020-08-27 | File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers… |
CVE-2020-11545 | Critical | 9.8 | 2020-04-06 | Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php), uname an… |
CVE-2020-11544 | High | 7.2 | 2020-04-06 | An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account because the u… |