Projectworlds Pvt. Limited vulnerabilities, page 2
50 vulnerabilities
Known vulnerabilities in Projectworlds Pvt. Limited products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
CVE-2023-44481projectworlds pvt. limitedleave management system project+1
EPSS score0.65%
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearnleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-44482projectworlds pvt. limitedleave management system project+1EPSS score0.65%
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setsickleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45117projectworlds pvt. limitedonline examination system+1EPSS score0.51%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45346projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45325projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45120projectworlds pvt. limitedonline examination system+1EPSS score0.65%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' parameter of the /update.php?q=quiz&step=2 resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45019online_bus_booking_system_projectonline_bus_booking_system+1EPSS score0.70%
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45345projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45111online_examination_system_projectonline_examination_system+1EPSS score0.70%
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45344projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45012online_bus_booking_system_projectonline_bus_booking_system+1EPSS score0.67%
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45116projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45336projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45343projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticket_id' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45115projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45341projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_price' parameter of the routers/menu-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45340projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/details-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45118projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45015online_bus_booking_system_projectonline_bus_booking_system+1EPSS score0.70%
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45203projectworlds pvt. limitedonline examination system+1EPSS score0.41%
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.