projectworlds Vulnerability Advisory Catalog

Total 223 security vulnerabilities recorded for projectworlds software and firmware.

← Back to All Vendors
CVE-2023-45341 CRITICAL
Component: online_food_ordering_system

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-...

๐Ÿ“… 2023-11-02
CVSS 9.8 Dossier →
CVE-2023-45340 CRITICAL
Component: online_food_ordering_system

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details...

๐Ÿ“… 2023-11-02
CVSS 9.8 Dossier →
CVE-2023-45336 CRITICAL
Component: online_food_ordering_system

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/rout...

๐Ÿ“… 2023-11-02
CVSS 9.8 Dossier →
CVE-2023-45334 CRITICAL
Component: online_food_ordering_system

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-o...

๐Ÿ“… 2023-11-02
CVSS 9.8 Dossier →
CVE-2023-45325 CRITICAL
Component: online_food_ordering_system

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-u...

๐Ÿ“… 2023-11-02
CVSS 9.8 Dossier →
CVE-2023-45323 CRITICAL
Component: online_food_ordering_system

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.ย The 'name' parameter of the routers/add-item...

๐Ÿ“… 2023-11-02
CVSS 9.8 Dossier →
Component: online_examination_system

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker...

๐Ÿ“… 2023-11-01
CVSS 6.1 Dossier →
Component: online_examination_system

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker ...

๐Ÿ“… 2023-11-01
CVSS 6.1 Dossier →
Component: online_examination_system

Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities.ย The 'q' parameter of the admin.php resource allows an attacker...

๐Ÿ“… 2023-11-01
CVSS 6.1 Dossier →
Component: online_blood_donation_management_system

Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/regi...

๐Ÿ“… 2023-10-31
CVSS 6.1 Dossier →
Component: leave_management_system

Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities.ย The 'setcasualleave' parameter of the admi...

๐Ÿ“… 2023-10-27
CVSS 8.8 Dossier →
CVE-2023-44267 CRITICAL
Component: online_art_gallery

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does n...

๐Ÿ“… 2023-10-26
CVSS 9.8 Dossier →
Component: online_movie_ticket_booking_system

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability. ...

๐Ÿ“… 2023-09-28
CVSS 6.4 Dossier →
CVE-2023-44166 CRITICAL
Component: online_movie_ticket_booking_system

The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database....

๐Ÿ“… 2023-09-28
CVSS 9.8 Dossier →
CVE-2023-44164 CRITICAL
Component: online_movie_ticket_booking_system

The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database. ...

๐Ÿ“… 2023-09-28
CVSS 9.8 Dossier →
CVE-2023-44163 CRITICAL
Component: online_movie_ticket_booking_system

The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database. ...

๐Ÿ“… 2023-09-28
CVSS 9.8 Dossier →
Component: asset_management_system

Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.p...

๐Ÿ“… 2023-09-28
CVSS 8.8 Dossier →
CVE-2023-5185 CRITICAL
Component: gym_management_system_project

Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an...

๐Ÿ“… 2023-09-28
CVSS 9.1 Dossier →
CVE-2023-5053 CRITICAL
Component: hospital_management_system_in_php

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. ...

๐Ÿ“… 2023-09-28
CVSS 9.8 Dossier →
CVE-2023-5004 CRITICAL
Component: hospital_management_system_in_php

Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. ...

๐Ÿ“… 2023-09-28
CVSS 9.8 Dossier →
Component: online_movie_ticket_booking_system

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability. ...

๐Ÿ“… 2023-09-28
CVSS 5.4 Dossier →
Component: online_book_store_project

Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowing an aut...

๐Ÿ“… 2023-09-28
CVSS 8.8 Dossier →
CVE-2023-43013 CRITICAL
Component: asset_management_system

Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an...

๐Ÿ“… 2023-09-28
CVSS 9.8 Dossier →
CVE-2023-43144 CRITICAL
Component: asset_management_system_project_in_php

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php....

๐Ÿ“… 2023-09-22
CVSS 9.8 Dossier →
Page 8 of 10 (223 Total Records)