Projectworlds
projectworlds
223 CVEs • 45 products
Products (45)
Click to collapseToggle
Products (45)
Click to collapse
CVEs (223)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Projectworlds 1Hospital Management System In Php Nov 21, 2024 Dec 22, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php. |
1Projectworlds 1Online Shopping System Oct 29, 2025 Dec 22, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the customer's cart. |
1Projectworlds 1Online Shopping System Oct 29, 2025 Dec 22, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 Dec 22, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 Dec 22, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php. |
1Projectworlds 1Travel Management System Nov 21, 2024 May 17, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary code. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtain sensitive information. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary code. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code. |
1Projectworlds 1Online Book Store Project In Php Nov 21, 2024 May 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. |
1Projectworlds 1Online Matrimonial Project Nov 21, 2024 Dec 23, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code execution (RCE) on the Hosting web server via uploading a mali...Show more |
1Projectworlds 1Visitor Management System Jan 23, 2026 Sep 30, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform vari...Show more |
1Projectworlds 1Visitor Management System Jan 23, 2026 Sep 30, 2020 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attacker can append SQL queries to the input to extract sensitive i...Show more |
1Projectworlds 1House Rental Nov 21, 2024 Sep 15, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POST request. |
1Projectworlds 1Car Rental Project Nov 21, 2024 Sep 9, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution. |
1Projectworlds 1Travel Management System Nov 21, 2024 Aug 27, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows remote unauthenticated attackers to gain remote code executio...Show more |