Projectworlds Asset Management System vulnerabilities
2 vulnerabilities
Known vulnerabilities in Projectworlds Asset Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-43013asset management systemasset management system+1
EPSS score0.86%
Asset Management System v1.0 is vulnerable to an
unauthenticated SQL Injection vulnerability on the
'email' parameter of index.php page, allowing an
external attacker to dump all the contents of the
database contents and bypass the login control.CVE-2023-43014asset management systemasset management system+1EPSS score0.79%
Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the 'first_name' and 'last_name' parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.