Lucene search
K

671 matches found

CNNVD
CNNVD
added 2023/09/28 12:0 a.m.3 views

Projectworlds Online Movie Ticket Booking System Cross-Site Scripting Vulnerability

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. Projectworlds Online Movie Ticket Booking System v1.0 suffers from a cross-site scripting vulnerability that stems from susceptibility to an authenticated stored cross-site scriptin...

6.4CVSS6AI score0.00353EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/09/28 12:0 a.m.3 views

Projectworlds Online Movie Ticket Booking System SQL Injection Vulnerability

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. Projectworlds Online Movie Ticket Booking System v1.0 suffers from a SQL injection vulnerability that originates from characters that are not validated as received and are sent to t...

9.8CVSS7.9AI score0.00805EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/09/28 12:0 a.m.3 views

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from the Austrian company Projectworlds. Projectworlds Hospital Management System version 378c157 suffers from a SQL injection vulnerability that originates from allowing bypassing authentication and is vulnerable to SQL...

9.8CVSS8.1AI score0.00901EPSS
Exploits1References3
OSV
OSV
added 2023/09/22 3:15 p.m.3 views

CVE-2023-43144

Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php...

9.8CVSS5.8AI score0.00911EPSS
Exploits2References1
CNNVD
CNNVD
added 2023/09/22 12:0 a.m.3 views

Projectworldsl Assets-management-system-in-php SQL Injection Vulnerability

Assets-management-system-in-php is a PHP asset management system for projectworlds individual developers. A security vulnerability exists in Projectworldsl Assets-management-system-in-php version 1.0, which stems from a SQL injection vulnerability in the parameter id of the file delete.php...

9.8CVSS8AI score0.00911EPSS
Exploits2References2
ATTACKERKB
ATTACKERKB
added 2023/07/10 4:15 p.m.1 views

CVE-2023-37152

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability...

9.8CVSS7.3AI score0.01667EPSS
Exploits1References5
OSV
OSV
added 2023/07/10 4:15 p.m.1 views

CVE-2023-37152

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability...

9.8CVSS5.8AI score
Exploits0References4
Cvelist
Cvelist
added 2023/07/10 12:0 a.m.26 views

CVE-2023-37152

Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page. Note: This has been disputed as not a valid vulnerability...

9.6AI score0.01667EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/07/10 12:0 a.m.3 views

Projectworlds Online Art gallery project 代码问题漏洞

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. A code issue vulnerability exists in Projectworlds Online Art Gallery Project version 1.0. An attacker can exploit this vulnerability to perform arbitrary file uploads via the adminHome.php page...

9.8CVSS8.7AI score0.01667EPSS
Exploits1References5
CVE
CVE
added 2023/07/10 12:0 a.m.59 views

CVE-2023-37152

CVE-2023-37152 concerns Projectworlds Online Art Gallery Project 1.0. Multiple sources report an unauthenticated arbitrary file-upload flaw via adminHome.php, describing a code issue that lets attackers upload arbitrary files (potential impact as stated). The vulnerability is disputed in some ent...

9.8CVSS9.3AI score0.01667EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.2 views

PT-2023-25810 · Unknown · Projectworlds Online Art Gallery Project

Name of the Vulnerable Software and Affected Versions: Projectworlds Online Art Gallery Project version 1.0 Description: The issue allows unauthenticated users to perform arbitrary file uploads via the "adminHome.php" page. However, it is noted that the validity of this issue has been disputed...

9.8CVSS7.5AI score0.01667EPSS
Exploits1References6
OSV
OSV
added 2023/02/17 3:15 p.m.1 views

CVE-2020-29168

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

9.8CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2023/02/17 3:15 p.m.17 views

CVE-2020-29168

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

9.8CVSS9.8AI score0.01244EPSS
Exploits1References3
Prion
Prion
added 2023/02/17 3:15 p.m.12 views

Sql injection

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

7.5CVSS9.7AI score0.01244EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/02/17 12:0 a.m.52 views

CVE-2020-29168

The CVE-2020-29168 entry describes a SQL Injection in the Projectworlds Online Doctor Appointment Booking System. Affected component: the getuser.php endpoint, where user input in the q parameter is not properly sanitized. Impact is high (CVE metrics: Confidentiality/Integrity/Availability all Hi...

9.8CVSS9.7AI score0.01244EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/17 12:0 a.m.4 views

CVE-2020-29168

SQL Injection vulnerability in Projectworlds Online Doctor Appointment Booking System, allows attackers to gain sensitive information via the q parameter to the getuser.php endpoint...

9.8AI score0.01244EPSS
Exploits1References3
CNVD
CNVD
added 2022/10/08 12:0 a.m.15 views

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria.Projectworlds Hospital Management System Mini-Project 2018.06.17 and earlier versions contain a SQL injection vulnerability, which can be exploited by attackers to obtain database data...

3.7AI score0.00692EPSS
Exploits1
OSV
OSV
added 2022/09/29 7:15 p.m.0 views

CVE-2022-33880

hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter...

9.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/09/29 7:15 p.m.13 views

CVE-2022-33880

hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter...

9.8CVSS0.00692EPSS
Exploits1References1
Prion
Prion
added 2022/09/29 7:15 p.m.20 views

Sql injection

hms-staff.php in Projectworlds Hospital Management System Mini-Project through 2018-06-17 allows SQL injection via the type parameter...

7.5CVSS9.8AI score0.00692EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder