Projectworlds vulnerabilities, page 4
241 vulnerabilities
Known vulnerabilities in Projectworlds products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 55 products.
CriticalCVE-2025-14211projectworlds · advanced library management systemprojectworlds Advanced Library Management System delete_book.php sql injectionA vulnerability was detected in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_book.php. Performing a manipulation of the argument book_id results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.EPSS0.39%CriticalCVE-2025-14571projectworlds · advanced library management systemprojectworlds Advanced Library Management System borrow_book.php sql injectionA vulnerability has been found in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /borrow_book.php. Such manipulation of the argument roll_number leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.43%CriticalCVE-2025-14210projectworlds · advanced library management systemprojectworlds Advanced Library Management System delete_member.php sql injectionA security vulnerability has been detected in projectworlds Advanced Library Management System 1.0. Affected is an unknown function of the file /delete_member.php. Such manipulation of the argument user_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.EPSS0.39%CriticalCVE-2025-4837projectworlds · student_project_allocation_systemprojectworlds Student Project Allocation System make_group_sql.php sql injectionA vulnerability classified as critical has been found in projectworlds Student Project Allocation System 1.0. This affects an unknown part of the file /make_group_sql.php. The manipulation of the argument mem1/mem2/mem3 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.60%CriticalCVE-2025-4456project worlds · car rental project +1 moreProject Worlds Car Rental Project signup.php sql injectionA vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.EPSS1.00%CriticalCVE-2025-4836projectworlds · life_insurance_management_systemProjectworlds Life Insurance Management System deleteAgent.php sql injectionA vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /deleteAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4936projectworlds · online_food_ordering_systemprojectworlds Online Food Ordering System admin-page.php sql injectionA vulnerability was found in projectworlds Online Food Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin-page.php. The manipulation of the argument 1_price leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4706projectworlds · online_examination_systemprojectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injectionA vulnerability was found in projectworlds Online Examination System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Procedure3b_yearwiseVisit.php. The manipulation of the argument Visit_year leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4058projectworlds · online_examination_systemProjectworlds Online Examination System Bloodgroop_process.php sql injectionA vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. This affects an unknown part of the file /Bloodgroop_process.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4482project worlds · student project allocation system +1 moreProject Worlds Student Project Allocation System forgot_password_sql.php sql injectionA vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Affected by this vulnerability is an unknown functionality of the file /change_pass/forgot_password_sql.php. The manipulation of the argument Pat_BloodGroup1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.EPSS0.59%CriticalCVE-2025-4034projectworlds · online_examination_systemprojectworlds Online Examination System inser_doc_process.php sql injectionA vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /inser_doc_process.php. The manipulation of the argument Doc_ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4931projectworlds · online_lawyer_management_systemprojectworlds Online Lawyer Management System user_registation.php sql injectionA vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /user_registation.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4457project worlds · car rental project +1 moreProject Worlds Car Rental Project approve.php sql injectionA vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS1.00%CriticalCVE-2025-4932projectworlds · online_lawyer_management_systemprojectworlds Online Lawyer Management System lawyer_registation.php sql injectionA vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Affected by this issue is some unknown functionality of the file /lawyer_registation.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4739projectworlds · hospital_database_management_systemprojectworlds Hospital Database Management System medicines_info.php sql injectionA vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknown part of the file /medicines_info.php. The manipulation of the argument Med_ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-4928projectsworld · online_lawyer_management_system +1 moreprojectworlds Online Lawyer Management System save_lawyer_edit_profile.php sql injectionA vulnerability was found in projectworlds Online Lawyer Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /save_lawyer_edit_profile.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected.EPSS0.56%CriticalCVE-2025-5004projectworlds · online_time_table_generatorprojectworlds Online Time Table Generator add_course.php sql injectionA vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/add_course.php. The manipulation of the argument c/subname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-5003projectworlds · online_time_table_generatorprojectworlds Online Time Table Generator semester_ajax.php sql injectionA vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /semester_ajax.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.EPSS0.56%CriticalCVE-2025-5213jkev · responsive_e-learning_system +1 moreprojectworlds Responsive E-Learning System delete_file.php sql injectionA vulnerability was found in projectworlds Responsive E-Learning System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_file.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.EPSS0.52%CriticalCVE-2025-5008projectworlds · online_time_table_generatorprojectworlds Online Time Table Generator add_teacher.php sql injectionA vulnerability was found in projectworlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_teacher.php. The manipulation of the argument e leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.EPSS0.56%