Vulnerabilities > Projectworlds > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-12-22 | CVE-2021-43631 | SQL Injection vulnerability in Projectworlds Hospital Management System in PHP 1.0 Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php. | 7.5 |
| 2021-05-06 | CVE-2020-19107 | SQL Injection vulnerability in PHP 1.0 SQL Injection vulnerability in Online Book Store v1.0 via the isbn parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. | 7.5 |
| 2021-05-06 | CVE-2020-19108 | SQL Injection vulnerability in PHP 1.0 SQL Injection vulnerability in Online Book Store v1.0 via the pubid parameter to bookPerPub.php, which could let a remote malicious user execute arbitrary code. | 7.5 |
| 2021-05-06 | CVE-2020-19109 | SQL Injection vulnerability in PHP 1.0 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_edit.php, which could let a remote malicious user execute arbitrary code. | 7.5 |
| 2021-05-06 | CVE-2020-19110 | SQL Injection vulnerability in PHP 1.0 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to book.php parameter, which could let a remote malicious user execute arbitrary code. | 7.5 |
| 2021-05-06 | CVE-2020-19112 | SQL Injection vulnerability in PHP 1.0 SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admin_delete.php, which could let a remote malicious user execute arbitrary code. | 7.5 |
| 2021-05-06 | CVE-2020-19113 | Unrestricted Upload of File with Dangerous Type vulnerability in PHP 1.0 Arbitrary File Upload vulnerability in Online Book Store v1.0 in admin_add.php, which may lead to remote code execution. | 7.5 |
| 2021-05-06 | CVE-2020-19114 | SQL Injection vulnerability in PHP 1.0 SQL Injection vulnerability in Online Book Store v1.0 via the publisher parameter to edit_book.php, which could let a remote malicious user execute arbitrary code. | 7.5 |
| 2020-09-15 | CVE-2020-23833 | SQL Injection vulnerability in Projectworlds House Rental 1.0 Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POST request. | 7.5 |
| 2020-09-09 | CVE-2020-24199 | Unrestricted Upload of File with Dangerous Type vulnerability in Projectworlds CAR Rental Project 1.0 Arbitrary File Upload in the Vehicle Image Upload component in Project Worlds Car Rental Management System v1.0 allows attackers to conduct remote code execution. | 7.5 |