Skip to content
Noroxi

projectworlds records

224 published records for vendor projectworlds.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
13
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

224 records
  • CVE-2020-23833
    40Plan

    Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary

    CriticalCVSS 9.8No exploitEPSS 4%

    projectworlds · house rentalSep 15, 2020

  • CVE-2020-24203
    40Plan

    Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management

    CriticalCVSS 9.8No exploitEPSS 4%

    projectworlds · travel management systemAug 27, 2020

  • CVE-2020-24199
    40Plan

    Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct

    CriticalCVSS 9.8No exploitEPSS 4%

    projectworlds · car rental projectSep 9, 2020

  • CVE-2020-19113
    40Plan

    Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution.

    CriticalCVSS 9.8No exploitEPSS 3%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2020-24202
    40Plan

    File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allo

    CriticalCVSS 9.8No exploitEPSS 3%

    projectworlds · house rental and property listing projectAug 27, 2020

  • CVE-2020-19114
    40Plan

    SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2020-19108
    40Plan

    SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user exe

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2020-19107
    40Plan

    SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execu

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2020-19109
    40Plan

    SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2020-19112
    40Plan

    SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious use

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2020-19111
    40Plan

    Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authe

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2020-11545
    39Monitor

    Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (acc

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · official car rental systemApr 6, 2020

  • CVE-2020-19110
    39Monitor

    SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious u

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online book store project in phpMay 6, 2021

  • CVE-2021-46307
    39Monitor

    An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.

    CriticalCVSS 9.8No exploitEPSS 2%

    projectworlds · online examination systemJan 21, 2022

  • CVE-2021-43629
    39Monitor

    Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · hospital management system in phpDec 22, 2021

  • CVE-2021-43631
    39Monitor

    Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · hospital management system in phpDec 22, 2021

  • CVE-2021-43157
    39Monitor

    Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · online shopping systemDec 22, 2021

  • CVE-2021-43628
    39Monitor

    Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · hospital management system in phpDec 22, 2021

  • CVE-2023-43144
    39Monitor

    Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    projectworlds · asset management system project in phpSep 22, 2023

  • CVE-2021-43155
    39Monitor

    Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · online book store project in phpDec 22, 2021

  • CVE-2023-5004
    39Monitor

    Hospital-management-system-in-php 378c157 - Blind SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · hospital management system in phpSep 28, 2023

  • CVE-2023-5053
    39Monitor

    SQL Injection in hospital-management-system-in-php 378c157 in index.php

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · hospital management system in phpSep 28, 2023

  • CVE-2023-44163
    39Monitor

    Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · online movie ticket booking systemSep 28, 2023

  • CVE-2023-44164
    39Monitor

    Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · online movie ticket booking systemSep 28, 2023

  • CVE-2023-44166
    39Monitor

    Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    CriticalCVSS 9.8No exploitEPSS 1%

    projectworlds · online movie ticket booking systemSep 28, 2023