projectworlds Vulnerability Advisory Catalog

Total 223 security vulnerabilities recorded for projectworlds software and firmware.

← Back to All Vendors
Component: visitor_management_system

Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. ...

📅 2020-09-30
CVSS 8.8 Dossier →
CVE-2020-23833 CRITICAL
Component: house_rental

Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on th...

📅 2020-09-15
CVSS 9.8 Dossier →
CVE-2020-24199 CRITICAL
Component: car_rental_project

Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote cod...

📅 2020-09-09
CVSS 9.8 Dossier →
CVE-2020-24203 CRITICAL
Component: travel_management_system

Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1....

📅 2020-08-27
CVSS 9.8 Dossier →
CVE-2020-24202 CRITICAL
Component: house_rental_and_property_listing_project

File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote ...

📅 2020-08-27
CVSS 9.8 Dossier →
CVE-2020-11545 CRITICAL
Component: official_car_rental_system

Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php),...

📅 2020-04-06
CVSS 9.8 Dossier →
Component: official_car_rental_system

An issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user to run commands on the server with their account beca...

📅 2020-04-06
CVSS 7.2 Dossier →
Page 10 of 10 (223 Total Records)