Project Worlds vulnerabilities
We track 29 vulnerabilities in Project Worlds products across 9 products. 29 are rated high or critical, and none are known to be exploited. The most recent was published on May 9, 2025.
Latest Project Worlds vulnerabilities
- 9.8 Critical severity
Student Project Allocation System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Affected by this vulnerability is an unknown functionality of the file /change_pass/forgot_password_sql.php. The manipulation of the argument Pat_BloodGro
- 9.8 Critical severity
Car Rental Project: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be
- 9.8 Critical severity
Car Rental Project: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely
- 9.8 Critical severity
Online Lawyer Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Online Lawyer Management System 1.0. It has been classified as critical. This affects an unknown part of the file /single_lawyer.php. The manipulation of the argument u_id leads to sql injection. It is possible to in
- 9.8 Critical severity
Online Lawyer Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /save_user_edit_profile.php. The manipulation of the argument first_Name leads to sql i
- 9.8 Critical severity
Online Lawyer Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /searchLawyer.php. The manipulation of the argument experience leads to sql
- 9.8 Critical severity
Online Lawyer Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Project Worlds Online Lawyer Management System 1.0. Affected is an unknown function of the file /save_booking.php. The manipulation of the argument lawyer_id/description leads to sql injection. It
- 9.8 Critical severity
Online Lawyer Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability, which was classified as critical, has been found in Project Worlds Online Lawyer Management System 1.0. This issue affects some unknown processing of the file /lawyer_booking.php. The manipulation of the argument unblock_id leads to sql inject
- 9.8 Critical severity
Online Lawyer Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Project Worlds Online Lawyer Management System 1.0. This vulnerability affects unknown code of the file /approve_lawyer.php. The manipulation of the argument unblock_id leads to sql injection. The attack can
- 9.8 Critical severity
Online Lawyer Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Project Worlds Online Lawyer Management System 1.0. This affects an unknown part of the file /admin_user.php. The manipulation of the argument block_id/unblock_id leads to sql injection. It is possible t
- 9.8 Critical severity
Online Time Table Generator: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack ca
- 9.8 Critical severity
Online Time Table Generator: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to ini
- 9.8 Critical severity
Online Time Table Generator: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_student.php. The manipulation of the argument pic leads to unrestricted uplo
- 8.8 High severity
Online Time Table Generator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been classified as critical. Affected is an unknown function of the file student/studentdashboard.php. The manipulation of the argument course leads to sql injection. It is pos
- 9.8 Critical severity
Online Time Table Generator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initia
- 9.8 Critical severity
Online Time Table Generator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument e leads to sql injection. The attack can be init
- 9.8 Critical severity
Online Time Table Generator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument e leads to sql injection. It is possible to initiate t
- 9.8 Critical severity
Free Download Online Shopping System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Free Download Online Shopping System up to 192.168.1.88. It has been rated as critical. This issue affects some unknown processing of the file /online-shopping-webvsite-in-php-master/success.php. The manipulation of
- 9.8 Critical severity
Life Insurance Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nominee_id leads to sql injection. The at
- 9.8 Critical severity
Life Insurance Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument recipt_no leads to sql injection. It is possible t
- 8.8 High severity
Online Time Table Generator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. Affected by this vulnerability is an unknown functionality of the file /timetable/staff/staffdashboard.php?info=updateprofile. The manipulation of the argument
- 7.2 High severity
Online Time Table Generator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. Affected is an unknown function of the file /timetable/admin/admindashboard.php?info=add_course. The manipulation of the argument c leads to sql injection.
- 9.8 Critical severity
Simple Web-Based Chat Application: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument username leads to sql injecti
- 9.8 Critical severity
Student Project Allocation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /student/project_selection/move_up_project.php of the component Project Selection Pag
- 9.8 Critical severity
Student Project Allocation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Project Worlds Student Project Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /student/project_selection/remove_project.php of the component Project Sel
- 9.8 Critical severity
Student Project Allocation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Project Worlds Student Project Allocation System 1.0. Affected is an unknown function of the file /student/project_selection/project_selection.php of the component Project Selection Page. The mani
- 9.8 Critical severity
Online Admission System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The e
- 9.8 Critical severity
Online Time Table Generator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file course_ajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the
- 9.8 Critical severity
Lawyer Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Project Worlds Lawyer Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file searchLawyer.php. The manipulation of the argument experience leads to sql inject