Projectworlds Pvt. Limited vulnerabilities, page 3
50 vulnerabilities
Known vulnerabilities in Projectworlds Pvt. Limited products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.
CVE-2023-45323projectworlds pvt. limitedonline food ordering system+1
EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45202projectworlds pvt. limitedonline examination system+1EPSS score0.41%
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45018online_bus_booking_system_projectonline_bus_booking_system+1EPSS score0.70%
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45201projectworlds pvt. limitedonline examination system+1EPSS score0.39%
Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL.CVE-2023-45121projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45342projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45119projectworlds pvt. limitedonline examination system+1EPSS score0.67%
Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter of the /update.php?q=quiz resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45347projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45334projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database.CVE-2023-45338projectworlds pvt. limitedonline food ordering system+1EPSS score0.70%
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database.