Projectworlds: Security Vulnerabilities
Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the 'first_name' and 'last_name' parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
CVSS Score
8.8
EPSS Score
0.006
Published
2023-09-28
The 'search' parameter of the process_search.php resource
does not validate the characters received and they
are sent unfiltered to the database.
CVSS Score
9.8
EPSS Score
0.008
Published
2023-09-28
The 'Email' parameter of the process_login.php resource
does not validate the characters received and they
are sent unfiltered to the database.
CVSS Score
9.8
EPSS Score
0.008
Published
2023-09-28
The 'age' parameter of the process_registration.php resource
does not validate the characters received and they
are sent unfiltered to the database.
CVSS Score
9.8
EPSS Score
0.008
Published
2023-09-28
Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Stored Cross-Site Scripting vulnerability.
CVSS Score
6.4
EPSS Score
0.004
Published
2023-09-28
Asset Management System v1.0 is vulnerable to an
unauthenticated SQL Injection vulnerability on the
'email' parameter of index.php page, allowing an
external attacker to dump all the contents of the
database contents and bypass the login control.
CVSS Score
9.8
EPSS Score
0.007
Published
2023-09-28
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of
admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting
the application.
CVSS Score
8.8
EPSS Score
0.012
Published
2023-09-28
Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Reflected Cross-Site Scripting vulnerability.
CVSS Score
5.4
EPSS Score
0.003
Published
2023-09-28
Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
CVSS Score
9.8
EPSS Score
0.009
Published
2023-09-28
Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
CVSS Score
9.8
EPSS Score
0.009
Published
2023-09-28