CVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint...

CVE-2024-22983

A SQL injection vulnerability exists in Projectworlds Visitor Management System (PHP v.1.0). This flaw allows a remote attacker to escalate privileges by exploiting the name parameter in the myform.php endpoint. The impact includes potential unauthorized access to sensitive data or internal syste...

PT-2024-19632

Name of the Vulnerable Software and Affected Versions Projectworlds Visitor Management System version 1.0 Description A SQL injection issue allows a remote attacker to escalate privileges via the name parameter in the "myform.php" endpoint. This enables the attacker to potentially gain unauthoriz...

CVE-2024-22983

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint...

Projectworlds Visitor Management System SQL Injection Vulnerability

Projectworlds Visitor Management System is a visitor access management system. It implements self-service functionality for visitors. A SQL injection vulnerability exists in Projectworlds Visitor Management System v.1.0 that could allow a remote attacker to escalate privileges via the name...

CVE-2024-22983: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint...

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

Exploit for SQL Injection in Projectworlds Visitor_Management_System

No d...

CVE-2024-22922: Improper Privilege Management

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

CVE-2024-22922

CVE-2024-22922 affects Projectworlds Vistor(Visitor) Management System in PHP v1.0. A remote attacker can escalate privileges via a crafted script submitted to POST/index.php on the login page, enabling full/total impact per included metrics (CVSSv3.1: 9.8, CRITICAL, Network vector, no user inter...

PT-2024-19615

Name of the Vulnerable Software and Affected Versions Projectworlds Vistor Management Systemin PHP version 1.0 Description An issue in the system allows a remote attacker to escalate privileges via a crafted script to the login page in the POST/index.php. Recommendations For version 1.0, consider...

Number withdrawn

Projectworlds Online Examination System is an online examination system from Projectworlds India. This CVE number has been withdrawn...

Projectworlds Student Result Management System SQL Injection Vulnerability

Projectworlds Student Result Management System is a student result management system from Projectworlds India. Projectworlds Student Result Management System v1.0 suffers from a SQL injection vulnerability, which arises when the "password" parameter of login.php does not validate the received...

Number withdrawn

Projectworlds Student Result Management System is a student result management system from Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Railway Reservation System is a railroad reservation system by Projectworlds India. This CVE number has been withdrawn...

Number withdrawn

Projectworlds Railway Reservation System is a railroad reservation system by Projectworlds India. This CVE number has been withdrawn...

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. Projectworlds Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the "n" parameter of update.php not validating received characters and sending them to the...