Projectworlds CVEs — known vulnerabilities

Student Project Allocation System CRITICAL 9.8

CVE-2024-10423

A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function…

No fix yet

Fix from $2,300 2024-10-27

Online Voting System Project MEDIUM 5.4

CVE-2024-45986

A stored Cross-Site Scripting (XSS) vulnerability was identified in Projectworld Online Voting System 1.0 that occurs when an account is registered w…

No fix yet

Fix from $1,600 2024-09-26

Online Examination System CRITICAL 9.8

CVE-2024-42843

Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.

No fix yet

Fix from $2,300 2024-08-15

Life Insurance Management System HIGH 8.8

CVE-2024-36597

Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.

No fix yet

Fix from $1,950 2024-06-14

Visitor Management System HIGH 8.1

CVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name para…

Mitigation only

Fix from $1,950 2024-02-28

Visitor Management System CRITICAL 9.8

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page…

Mitigation only

Fix from $2,300 2024-01-25

Online Time Table Generator CRITICAL 9.8

CVE-2024-0730

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the f…

No fix yet

Fix from $2,300 2024-01-19

Student Project Allocation System MEDIUM 6.1

CVE-2024-0726

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown …

No fix yet

Fix from $1,600 2024-01-19

Visitor Management System MEDIUM 6.1

CVE-2024-0650

A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of …

No fix yet

Fix from $1,600 2024-01-18

Online Lawyer Management System CRITICAL 9.8

CVE-2024-0498

A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unkn…

Mitigation only

Fix from $2,300 2024-01-13

Online Lawyer Management System MEDIUM 5.4

CVE-2024-0266

A vulnerability classified as problematic has been found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of th…

No fix yet

Fix from $1,600 2024-01-07

Railway Reservation System CRITICAL 9.8

CVE-2023-48689

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' parameter of the train.php reso…

No fix yet

Fix from $2,300 2023-12-21

Student Result Management System CRITICAL 9.8

CVE-2023-48716

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_id' parameter of the add_cl…

No fix yet

Fix from $2,300 2023-12-21

Railway Reservation System CRITICAL 9.8

CVE-2023-48687

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reservation.php …

No fix yet

Fix from $2,300 2023-12-21

Railway Reservation System CRITICAL 9.8

CVE-2023-48685

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.php resourc…

No fix yet

Fix from $2,300 2023-12-21

Leave Management System HIGH 8.8

CVE-2023-44482

Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin…

No fix yet