Lucene search
+L

354 matches found

Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•19 views

PT-2025-10038 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Life Insurance Management System version 1.0 Description: A critical vulnerability has been found in the Projectworlds Life Insurance Management System. This issue affects the file /updateAgent.php, where the manipulation of the...

9.8CVSS7.5AI score0.00537EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•12 views

PT-2025-10039

Name of the Vulnerable Software and Affected Versions: projectworlds Life Insurance Management System version 1.0 Description: A vulnerability exists in projectworlds Life Insurance Management System 1.0, classified as critical. The issue affects some unknown processing of the file /search.php...

9.8CVSS7.5AI score0.00537EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2025/03/07 12:00 a.m.•16 views

Projectworlds Life Insurance Management System 注入漏洞

Projectworlds Life Insurance Management System is a life insurance management system from Projectworlds India. An injection vulnerability exists in Projectworlds Life Insurance Management System version 1.0, which stems from improper manipulation of the nomineeid parameter and can lead to SQL...

9.8CVSS7.8AI score0.00537EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/07 12:00 a.m.•2 views

CVE-2025-2067: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00537EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/07 12:00 a.m.•1 views

CVE-2025-2064: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be launche...

9.8CVSS7AI score0.00537EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/07 12:00 a.m.•3 views

CVE-2025-2065: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /editAgent.php. The manipulation of the argument agentid leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS7AI score0.00537EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/07 12:00 a.m.•1 views

CVE-2025-2063: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nomineeid leads to sql injection. The attack can be launched remotely...

9.8CVSS7AI score0.00537EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/03 2:15 p.m.•33 views

CVE-2024-10735

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nomineeid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS0.00534EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/11/03 2:00 p.m.•42 views

CVE-2024-10735 Project Worlds Life Insurance Management System editNominee.php sql injection

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nomineeid leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.00534EPSS
SaveExploits1References4
CVE
CVE
•added 2024/11/03 2:00 p.m.•65 views

CVE-2024-10735

CVE-2024-10735 affects Project Worlds Life Insurance Management System 1.0. The vulnerability is in the file /editNominee.php, where manipulation of the nominee_id parameter leads to an SQL injection. The issue is remotely exploitable and publicly disclosed. Affected scope is the system’s ability...

9.8CVSS7.1AI score0.00534EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2024/11/03 1:15 p.m.•12 views

CVE-2024-10734

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.8AI score0.00534EPSS
SaveExploits1References4
NVD
NVD
•added 2024/11/03 1:15 p.m.•22 views

CVE-2024-10734

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS0.00534EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/03 12:00 a.m.•3 views

CVE-2024-10735: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nomineeid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.4AI score0.00534EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/03 12:00 a.m.•3 views

CVE-2024-10734: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.4AI score0.00534EPSS
SaveExploits1References1
OSV
OSV
•added 2024/09/04 5:15 p.m.•16 views

CVE-2024-8414

A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...

4.3CVSS4.7AI score0.00348EPSS
SaveExploits1References5
NVD
NVD
•added 2024/09/04 5:15 p.m.•29 views

CVE-2024-8414

A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...

6.9CVSS0.00348EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/09/04 4:31 p.m.•28 views

CVE-2024-8414 SourceCodester Insurance Management System cross-site request forgery

A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...

6.9CVSS7AI score0.00348EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/09/04 4:31 p.m.•50 views

CVE-2024-8414 SourceCodester Insurance Management System cross-site request forgery

A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...

6.9CVSS0.00348EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/04 4:31 p.m.•72 views

CVE-2024-8414

CVE-2024-8414 affects SourceCodester Insurance Management System 1.0. The vulnerability is a cross-site request forgery (CSRF) in an unknown functionality that can be triggered remotely; the exploit has been disclosed publicly. The provided connected documents confirm CSRF impact but do not speci...

6.9CVSS4.6AI score0.00348EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/04 12:00 a.m.•4 views

CVE-2024-8414: Cross-Site Request Forgery (CSRF)

A vulnerability has been found in SourceCodester Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to...

6.9CVSS4.9AI score0.00348EPSS
SaveExploits1References1
Rows per page
Query Builder