← Back

Preprojects

preprojects

29 CVEs • 14 products

Products (14)

Click to collapse
Toggle
Pre Real Estate Listings
pre_real_estate_listings
4 CVEs
Pre Classified Listings
pre_classified_listings
4 CVEs
Php Jobwebsite Pro
php_jobwebsite_pro
3 CVEs
Pre Ads Portal
pre_ads_portal
3 CVEs
Pre Classified Listings Asp
pre_classified_listings_asp
3 CVEs
Pre Shopping Mall
pre_shopping_mall
2 CVEs
Pre E Learning Portal
pre_e-learning_portal
2 CVEs
Pre Printing Press
pre_printing_press
2 CVEs
Pre Job Board
pre_job_board
1 CVE
E Smart Cart
e-smart_cart
1 CVE
Pre Resume Submitter
pre_resume_submitter
1 CVE
Pre Podcast Portal
pre_podcast_portal
1 CVE
Pre Online Tests Generator
pre_online_tests_generator
1 CVE
Business Cards Designer
business_cards_designer
1 CVE

CVEs (29)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5334
1Preprojects
1Pre Printing Press
Apr 29, 2026
Oct 8, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in product_desc.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the pid parameter.
CVE-2012-5333
1Preprojects
1Pre Printing Press
Apr 29, 2026
Oct 8, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in page.php in Pre Printing Press allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2011-5139
1Preprojects
1Business Cards Designer
Apr 29, 2026
Aug 31, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2010-4776
1Preprojects
1Pre Online Tests Generator
Apr 29, 2026
Mar 23, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via the tid2 parameter.
CVE-2010-1371
1Preprojects
1Pre Classified Listings Asp
Apr 29, 2026
Apr 13, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to inject arbitrary web script or HTML via the address parameter.
CVE-2010-1370
1Preprojects
1Pre Classified Listings Asp
Apr 29, 2026
Apr 13, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter.
CVE-2010-1369
1Preprojects
1Pre Classified Listings Asp
Apr 29, 2026
Apr 13, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVE-2010-0954
1Preprojects
1Pre E Learning Portal
Apr 29, 2026
Mar 10, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter.
CVE-2008-7052
1Preprojects
1Pre Real Estate Listings
Apr 23, 2026
Aug 24, 2009
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile log...Show more
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/.Show less
CVE-2008-6888
1Preprojects
1Pre Classified Listings
Apr 23, 2026
Aug 3, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in signup.asp in Pre Classified Listings 1.0 allows remote attackers to inject arbitrary web script or HTML via the address parameter.
CVE-2008-6887
1Preprojects
1Pre Classified Listings
Apr 23, 2026
Aug 3, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter.
CVE-2008-6798
1Preprojects
1Pre Real Estate Listings
Apr 23, 2026
May 7, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parame...Show more
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).Show less
CVE-2008-6796
1Preprojects
1Pre Real Estate Listings
Apr 23, 2026
May 7, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).
CVE-2008-6716
1Preprojects
1Pre Ads Portal
Apr 23, 2026
Apr 13, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
homeadmin/adminhome.php in Pre ADS Portal 2.0 and earlier does not require administrative authentication, which allows remote attackers to have an unspecified impact via a direct request.
CVE-2008-6715
1Preprojects
1Pre Ads Portal
Apr 23, 2026
Apr 13, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) homeadmin/adminhome.php and (2) homeadmin/s...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Pre ADS Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the msg parameter to (1) homeadmin/adminhome.php and (2) homeadmin/signinform.php.Show less
CVE-2008-6232
1Preprojects
1Pre Shopping Mall
Apr 23, 2026
Feb 20, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Pre Shopping Mall allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".
CVE-2008-6231
1Preprojects
1Pre Classified Listings
Apr 23, 2026
Feb 20, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
Pre Classified Listing PHP allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".
CVE-2008-6230
1Preprojects
1Pre Podcast Portal
Apr 23, 2026
Feb 20, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in Tour.php in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6055
1Preprojects
1Pre Classified Listings
Apr 23, 2026
Feb 4, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PreProjects Pre Classified Listings stores pclasp.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.
CVE-2008-6053
1Preprojects
1Pre Resume Submitter
Apr 23, 2026
Feb 4, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PreProjects Pre Resume Submitter stores onlineresume.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.