CveMateVulnerability intelligence

Projectworlds Pvt. Limited vulnerabilities

50 vulnerabilities

Known vulnerabilities in Projectworlds Pvt. Limited products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.

Products

11

Online Food Ordering System13 vulnerabilities
Online Examination System11 vulnerabilities
Online Matrimonial Project6 vulnerabilities
Online Bus Booking System4 vulnerabilities
Student Result Management System4 vulnerabilities
Leave Management System Project3 vulnerabilities
Railway Reservation System3 vulnerabilities
Online Job Portal2 vulnerabilities
Online Voting System Project2 vulnerabilities
Online Art Gallery1 vulnerabilities
Online Blood Donation Management System1 vulnerabilities

CVE-2023-48687projectworlds pvt. limitedrailway reservation system+12y ago21-12-2023 20:42

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reservation.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48718phpgurukulstudent_result_management_system+12y ago21-12-2023 20:57

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_students.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48720phpgurukulstudent_result_management_system+12y ago21-12-2023 21:00

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48685projectworlds pvt. limitedrailway reservation system+12y ago21-12-2023 20:11

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48433projectworlds pvt. limitedonline voting system project+12y ago20-12-2023 20:28

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the login_action.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48722phpgurukulstudent_result_management_system+12y ago21-12-2023 21:06

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_name' parameter of the add_results.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48434projectworlds pvt. limitedonline voting system project+12y ago20-12-2023 20:29

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the reg_action.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48716projectworlds pvt. limitedstudent result management system+12y ago21-12-2023 20:53

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'class_id' parameter of the add_classes.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-48689projectworlds pvt. limitedrailway reservation system+12y ago21-12-2023 20:46

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' parameter of the train.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46677projectworlds pvt. limitedonline job portal+12y ago07-11-2023 20:35

Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname' parameter of the sign-up.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46785projectworlds pvt. limitedonline matrimonial project+12y ago07-11-2023 20:57

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partner_preference.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46800projectworlds pvt. limitedonline matrimonial project+12y ago07-11-2023 21:19

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the view_profile.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46793projectworlds pvt. limitedonline matrimonial project+12y ago07-11-2023 21:10

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46788projectworlds pvt. limitedonline matrimonial project+12y ago07-11-2023 21:01

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter in the 'uploadphoto()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46787projectworlds pvt. limitedonline matrimonial project+12y ago07-11-2023 20:59

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46789projectworlds pvt. limitedonline matrimonial project+12y ago07-11-2023 21:02

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-46679projectworlds pvt. limitedonline job portal+12y ago07-11-2023 20:37

Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname_email' parameter of the index.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-44480projectworlds pvt. limitedleave management system project+12y ago27-10-2023 20:52

Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-44267projectworlds pvt. limitedonline art gallery+12y ago26-10-2023 19:14

Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-44484projectworlds pvt. limitedonline blood donation management system+12y ago31-10-2023 21:09

Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response.