Projectworlds Pvt. vulnerabilities
We track 46 vulnerabilities in Projectworlds Pvt. products across 10 products. 46 are rated high or critical, and none are known to be exploited. The most recent was published on December 21, 2023.
Latest Projectworlds Pvt. vulnerabilities
- 9.8 Critical severity
Online Bus Booking System: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Bus Booking System: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Bus Booking System: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Examination System: Improper Neutralization of Special Elements used in an SQL Command
Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database.
- 8.8 High severity
Leave Management System Project: Improper Neutralization of Special Elements used in an SQL Command
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the databas
- 9.8 Critical severity
Online Art Gallery: Improper Neutralization of Special Elements used in an SQL Command
Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database.