Projectworlds vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-57328 A SQL Injection vulnerability exists in the login form of Online Food Ordering System v1.0.Critical 9.8 · Jan 23, 2025
• CVE-2024-51327 SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'usernaCritical 9.8 · Nov 4, 2024
• CVE-2024-36598 An arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary code via uploading a crafted image file.High 8.1 · Jun 14, 2024
• CVE-2024-36597 Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.High 8.8 · Jun 14, 2024
• CVE-2021-44866 An issue was discovered in Online-Movie-Ticket-Booking-System 1.0.High 7.5 · Feb 3, 2022
• CVE-2021-43157 Projectsworlds Online Shopping System PHP 1.0 is vulnerable to SQL injection via the id parameter in cart_remove.php.Critical 9.8 · Dec 22, 2021
• CVE-2021-43155 Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the "bookisbn" parameter in cart.php.Critical 9.8 · Dec 22, 2021
• CVE-2020-19114 SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary coCritical 9.8 · May 6, 2021
• CVE-2020-19113 Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution.Critical 9.8 · May 6, 2021
• CVE-2020-19112 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary Critical 9.8 · May 6, 2021
• CVE-2020-19111 Incorrect Access Control vulnerability in Online Book Store v1.0 via admin_verify.php, which could let a remote mailicious user bypass authentication and obtainCritical 9.8 · May 6, 2021
• CVE-2020-19110 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrarCritical 9.8 · May 6, 2021
• CVE-2020-19109 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary coCritical 9.8 · May 6, 2021
• CVE-2020-19108 SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code.Critical 9.8 · May 6, 2021
• CVE-2020-19107 SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code.Critical 9.8 · May 6, 2021
• CVE-2020-27397 Marital - Online Matrimonial Project In PHP version 1.0 suffers from an authenticated file upload vulnerability allowing remote attackers to gain remote code exHigh 8.8 · Dec 23, 2020
• CVE-2020-24199 Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code executioCritical 9.8 · Sep 9, 2020
• CVE-2020-24203 Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows rCritical 9.8 · Aug 27, 2020
• CVE-2020-24202 File Upload component in Projects World House Rental v1.0 suffers from an arbitrary file upload vulnerability with regular users, which allows remote attackers Critical 9.8 · Aug 27, 2020
• CVE-2020-11545 Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (account.php), uname andCritical 9.8 · Apr 6, 2020
• CVE-2020-11544 An issue was discovered in Project Worlds Official Car Rental System 1.High 7.2 · Apr 6, 2020