ProjectWorlds vulnerabilities
We track 123 vulnerabilities in ProjectWorlds products across 37 products. 123 are rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2026.
Latest ProjectWorlds vulnerabilities
- 8.8 High severity
Leave Management System Project: Improper Neutralization of Special Elements used in an SQL Command
Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the databas
- 8.8 High severity
Online Book Store Project: Unrestricted Upload of File with Dangerous Type
Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.
- 9.8 Critical severity
House Rental and Property Listing: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability, which was classified as critical, has been found in SourceCodester/projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /index.php. The manipulation of the argument keywords/location leads