projectworlds Vulnerability Advisory Catalog

Total 223 security vulnerabilities recorded for projectworlds software and firmware.

← Back to All Vendors
Component: online_examination_system

Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php....

📅 2022-10-14
CVSS 6.1 Dossier →
Component: hospital_management_system_in_php

An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via ad...

📅 2022-03-16
CVSS 5.3 Dossier →
Component: online_movie_ticket_booking_system

An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attac...

📅 2022-02-03
CVSS 7.5 Dossier →
CVE-2021-46024 CRITICAL
Component: online-shopping-webvsite-in-php

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is requi...

📅 2022-01-23
CVSS 9.8 Dossier →
CVE-2021-46307 CRITICAL
Component: online_examination_system

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php....

📅 2022-01-21
CVSS 9.8 Dossier →
CVE-2021-43631 CRITICAL
Component: hospital_management_system_in_php

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php....

📅 2021-12-22
CVSS 9.8 Dossier →
Component: hospital_management_system_in_php

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated...

📅 2021-12-22
CVSS 8.8 Dossier →
CVE-2021-43629 CRITICAL
Component: hospital_management_system_in_php

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php....

📅 2021-12-22
CVSS 9.8 Dossier →
CVE-2021-43628 CRITICAL
Component: hospital_management_system_in_php

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php....

📅 2021-12-22
CVSS 9.8 Dossier →
Component: online_shopping_system

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cart_remove.php allows a remote attacker to remove any product in the custome...

📅 2021-12-22
CVSS 4.3 Dossier →
CVE-2021-43157 CRITICAL
Component: online_shopping_system

Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php....

📅 2021-12-22
CVSS 9.8 Dossier →
Component: online_book_store_project_in_php

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book....

📅 2021-12-22
CVSS 6.5 Dossier →
CVE-2021-43155 CRITICAL
Component: online_book_store_project_in_php

Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php....

📅 2021-12-22
CVSS 9.8 Dossier →
Component: travel_management_system

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field...

📅 2021-05-17
CVSS 6.1 Dossier →
CVE-2020-19114 CRITICAL
Component: online_book_store_project_in_php

SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute ar...

📅 2021-05-06
CVSS 9.8 Dossier →
CVE-2020-19113 CRITICAL
Component: online_book_store_project_in_php

Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution....

📅 2021-05-06
CVSS 9.8 Dossier →
CVE-2020-19112 CRITICAL
Component: online_book_store_project_in_php

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute ...

📅 2021-05-06
CVSS 9.8 Dossier →
CVE-2020-19111 CRITICAL
Component: online_book_store_project_in_php

Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication ...

📅 2021-05-06
CVSS 9.8 Dossier →
CVE-2020-19110 CRITICAL
Component: online_book_store_project_in_php

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execut...

📅 2021-05-06
CVSS 9.8 Dossier →
CVE-2020-19109 CRITICAL
Component: online_book_store_project_in_php

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute ar...

📅 2021-05-06
CVSS 9.8 Dossier →
CVE-2020-19108 CRITICAL
Component: online_book_store_project_in_php

SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbit...

📅 2021-05-06
CVSS 9.8 Dossier →
CVE-2020-19107 CRITICAL
Component: online_book_store_project_in_php

SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitra...

📅 2021-05-06
CVSS 9.8 Dossier →
Component: online_matrimonial_project

Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remo...

📅 2020-12-23
CVSS 8.8 Dossier →
Component: visitor_management_system

Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An att...

📅 2020-09-30
CVSS 6.1 Dossier →
Page 9 of 10 (223 Total Records)