Project Worlds vulnerabilities

33 vulnerabilities

Known vulnerabilities in Project Worlds products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 10 products.

Products

10
8.8HighCVE-2025-2662project worlds · online time table generator +1 moreProject Worlds Online Time Table Generator studentdashboard.php sql injectionA vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown function of the file student/studentdashboard.php. The manipulation of the argument course leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.60%9.8CriticalCVE-2025-2660project worlds · online time table generator +1 moreProject Worlds Online Time Table Generator index.php sql injectionA vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument e leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.54%9.8CriticalCVE-2025-2659project worlds · online time table generator +1 moreProject Worlds Online Time Table Generator index.php sql injectionA vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument e leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.54%9.8CriticalCVE-2025-2661project worlds · online time table generator +1 moreProject Worlds Online Time Table Generator index.php sql injectionA vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.70%9.8CriticalCVE-2025-4456project worlds · car rental project +1 moreProject Worlds Car Rental Project signup.php sql injectionA vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.EPSS1.00%9.8CriticalCVE-2025-4482project worlds · student project allocation system +1 moreProject Worlds Student Project Allocation System forgot_password_sql.php sql injectionA vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Affected by this vulnerability is an unknown functionality of the file /change_pass/forgot_password_sql.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.EPSS0.59%9.8CriticalCVE-2025-4457project worlds · car rental project +1 moreProject Worlds Car Rental Project approve.php sql injectionA vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.00%9.8CriticalCVE-2025-3175project worlds · online lawyer management system +1 moreProject Worlds Online Lawyer Management System save_user_edit_profile.php sql injectionA vulnerability was found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /save_user_edit_profile.php. The manipulation of the argument first_Name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.51%9.8CriticalCVE-2025-3174project worlds · online lawyer management system +1 moreProject Worlds Online Lawyer Management System searchLawyer.php sql injectionA vulnerability has been found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /searchLawyer.php. The manipulation of the argument experience leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%9.8CriticalCVE-2025-3040project worlds · online time table generator +1 moreProject Worlds Online Time Table Generator add_student.php unrestricted uploadA vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_student.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.64%9.8CriticalCVE-2025-3173project worlds · online lawyer management system +1 moreProject Worlds Online Lawyer Management System save_booking.php sql injectionA vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /save_booking.php. The manipulation of the argument lawyer_id/description leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%9.8CriticalCVE-2025-3042project worlds · online time table generator +1 moreProject Worlds Online Time Table Generator updateprofile.php unrestricted uploadA vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.48%9.8CriticalCVE-2025-3041project worlds · online time table generator +1 moreProject Worlds Online Time Table Generator updatestudent.php unrestricted uploadA vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.48%9.8CriticalCVE-2025-3176project worlds · online lawyer management system +1 moreProject Worlds Online Lawyer Management System single_lawyer.php sql injectionA vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. This affects an unknown part of the file /single_lawyer.php. The manipulation of the argument u_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.51%9.8CriticalCVE-2025-3172project worlds · online lawyer management system +1 moreProject Worlds Online Lawyer Management System lawyer_booking.php sql injectionA vulnerability, which was classified as critical, has been found in Project Worlds Online Lawyer Management System 1.0. This issue affects some unknown processing of the file /lawyer_booking.php. The manipulation of the argument unblock_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.51%9.8CriticalCVE-2025-3170project worlds · online lawyer management system +1 moreProject Worlds Online Lawyer Management System admin_user.php sql injectionA vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /admin_user.php. The manipulation of the argument block_id/unblock_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.60%9.8CriticalCVE-2025-3171project worlds · online lawyer management system +1 moreProject Worlds Online Lawyer Management System approve_lawyer.php sql injectionA vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0. This vulnerability affects unknown code of the file /approve_lawyer.php. The manipulation of the argument unblock_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.54%9.8CriticalCVE-2024-11059project worlds · free download online shopping system +1 moreProject Worlds Free Download Online Shopping System success.php sql injectionA vulnerability was found in Project Worlds Free Download Online Shopping System up to 192.168.1.88. It has been rated as critical. This issue affects some unknown processing of the file /online-shopping-webvsite-in-php-master/success.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.51%9.8CriticalCVE-2024-0783online_admission_system_project · online_admission_system +1 moreProject Worlds Online Admission System documents.php unrestricted uploadA vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251699.EPSS1.25%6.1MediumCVE-2024-0726project worlds · student project allocation system +1 moreProject Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scriptingA vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file admin_login.php of the component Admin Login Module. The manipulation of the argument msg with the input test%22%3Cscript%3Ealert(%27Torada%27)%3C/script%3E leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-251549 was assigned to this vulnerability.EPSS0.64%