← Back

Preprojects

preprojects

29 CVEs • 14 products

Products (14)

Click to collapse
Toggle

CVEs (29)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Preprojects
1Pre E Learning Portal
Apr 23, 2026
Feb 4, 2009
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PreProjects Pre E-Learning Portal stores db_elearning.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.
1Preprojects
1Php Jobwebsite Pro
Apr 23, 2026
Jan 27, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in siteadmin/forgot.php in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the adname parameter in a Submit action.
1Preprojects
1Php Jobwebsite Pro
Apr 23, 2026
Jan 27, 2009
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submit action or (2) the U...Show more
Multiple cross-site scripting (XSS) vulnerabilities in siteadmin/forgot.php in PHP JOBWEBSITE PRO allow remote attackers to inject arbitrary web script or HTML via (1) the adname parameter in a Submit action or (2) the UserName field.Show less
1Preprojects
1Pre Real Estate Listings
Apr 23, 2026
Sep 23, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter.
1Preprojects
1E Smart Cart
Apr 23, 2026
Jun 30, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in productsofcat.asp in E-SMART CART allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
1Preprojects
1Pre Ads Portal
Apr 23, 2026
Jun 30, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to showcategory.php and the...Show more
Multiple SQL injection vulnerabilities in Pre ADS Portal 2.0 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to showcategory.php and the (2) id parameter to software-description.php.Show less
1Preprojects
1Pre Job Board
Apr 23, 2026
Jun 30, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in jobseekers/JobSearch.php (aka the search module) in Pre Job Board allow remote attackers to execute arbitrary SQL commands via the (1) position or (2) kw parameter.
1Preprojects
1Php Jobwebsite Pro
Apr 23, 2026
Jun 30, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position parameter. NOTE: some of th...Show more
SQL injection vulnerability in jobseekers/JobSearch3.php (aka the search module) in PHP JOBWEBSITE PRO allows remote attackers to execute arbitrary SQL commands via the (1) kw or (2) position parameter. NOTE: some of these details are obtained from third party information.Show less
1Preprojects
1Pre Shopping Mall
Apr 23, 2026
May 8, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in emall/search.php in Pre Shopping Mall 1.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.