Vulnerabilities > Projectworlds > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-04 | CVE-2024-51326 | SQL Injection vulnerability in Projectworlds Travel Management System 1.0 SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php. | 7.5 |
| 2024-10-28 | CVE-2024-10447 | SQL Injection vulnerability in Projectworlds Online Time Table Generator 1.0 A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. | 8.8 |
| 2024-10-28 | CVE-2024-10446 | SQL Injection vulnerability in Projectworlds Online Time Table Generator 1.0 A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. | 7.2 |
| 2024-06-14 | CVE-2024-36597 | SQL Injection vulnerability in Projectworlds Life Insurance Management System 1.0 Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php. | 8.8 |
| 2023-12-21 | CVE-2023-45120 | Unspecified vulnerability in Projectworlds Online Examination System 1.0 Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' parameter of the /update.php?q=quiz&step=2 resource does not validate the characters received and they are sent unfiltered to the database. | 8.8 |
| 2023-12-21 | CVE-2023-45121 | Unspecified vulnerability in Projectworlds Online Examination System 1.0 Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' parameter of the /update.php?q=addquiz resource does not validate the characters received and they are sent unfiltered to the database. | 8.8 |
| 2023-12-21 | CVE-2023-45115 | Unspecified vulnerability in Projectworlds Online Examination System 1.0 Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter of the /update.php?q=addqns resource does not validate the characters received and they are sent unfiltered to the database. | 8.8 |
| 2023-12-21 | CVE-2023-45116 | Unspecified vulnerability in Projectworlds Online Examination System 1.0 Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database. | 8.8 |
| 2023-12-21 | CVE-2023-45117 | SQL Injection vulnerability in Projectworlds Online Examination System 1.0 Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' parameter of the /update.php?q=rmquiz resource does not validate the characters received and they are sent unfiltered to the database. | 8.8 |
| 2023-12-21 | CVE-2023-45118 | Unspecified vulnerability in Projectworlds Online Examination System 1.0 Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' parameter of the /update.php resource does not validate the characters received and they are sent unfiltered to the database. | 8.8 |