CVE-2024-0783 Project Worlds Online Admission System documents.php unrestricted upload

A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the publ...

CVE-2024-0783

CVE-2024-0783 affects Project Worlds Online Admission System 1.0, with a vulnerability in the processing of the file documents.php that enables unrestricted file upload. The issue can be exploited remotely and has been widely reported across multiple feeds (e.g., Red Hat, Vulners-related enrichme...

CVE-2024-0783 Project Worlds Online Admission System documents.php unrestricted upload

A vulnerability was found in Project Worlds Online Admission System 1.0 and classified as critical. This issue affects some unknown processing of the file documents.php. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the publ...

PT-2024-15816 · Unknown · Projectworlds Online Admission System

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Admission System version 1.0 Description: A critical issue affects the processing of the file documents.php, leading to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-0730

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-0730

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Sql injection

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-0730 Project Worlds Online Time Table Generator course_ajax.php sql injection

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-0730

Mode C: CVE-2024-0730 affects Project Worlds Online Time Table Generator 1.0; vulnerable component is course_ajax.php where manipulation of the id parameter leads to SQL injection. The issue is exploitable remotely and has been publicly disclosed (VDB-251553). Remediation details in connected doc...

CVE-2024-0730 Project Worlds Online Time Table Generator course_ajax.php sql injection

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file courseajax.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2024-0726

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

Cross site scripting

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

CVE-2024-0726

CVE-2024-0726 affects Project Worlds Student Project Allocation System 1.0, specifically the Admin Login Module via the file admin_login.php. The vulnerability is a cross-site scripting (XSS) flaw caused by manipulating the msg argument (example input: test%22%3Cscript%3Ealert(%27Torada%27)%3C/sc...

CVE-2024-0726 Project Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

CVE-2024-0726 Project Worlds Student Project Allocation System Admin Login Module admin_login.php cross site scripting

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

Project Worlds Student Project Allocation System Security Vulnerability

Project Worlds Student Project Allocation System is a student project allocation system from Project Worlds. A security vulnerability exists in Project Worlds Student Project Allocation System version 1.0, which stems from the parameter msg in the file adminlogin.php that can lead to cross-site...

PT-2024-15784 · Unknown · Project Worlds Student Project Allocation System

Name of the Vulnerable Software and Affected Versions: Project Worlds Student Project Allocation System version 1.0 Description: A vulnerability was found in the Admin Login Module, specifically affecting the file admin login.php. The issue allows for cross-site scripting through the manipulation...

CVE-2024-0650

A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input "alert'torada' leads to cross site scripting...

CVE-2024-0650

A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input "alert'torada' leads to cross site scripting...

Cross site scripting

A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input "alert'torada' leads to cross site scripting...