Lucene search
+L

682 matches found

CNVD
CNVD
added 2021/12/24 12:00 a.m.60 views

Projectworlds Online Shopping System SQL Injection Vulnerability

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectsworlds.A SQL injection vulnerability exists in Projectsworlds Online Book Store PHP, which stems from the fact that Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the...

9.8CVSS2.5AI score0.01094EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/24 12:00 a.m.30 views

Projectworlds Online Shopping System CSRF Vulnerability

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectworlds.A security vulnerability exists in Projectworlds Online Shopping System PHP, which stems from a CSRF vulnerability in ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in...

4.3CVSS2.7AI score0.00454EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/24 12:00 a.m.71 views

Projectworlds Online Book Store Project In Php CSRF Vulnerability

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A security vulnerability exists in Projectworlds Online Book Store Project In Php version 1.0, which can be exploited by an attacker to delete any book from the system...

6.5CVSS6.4AI score0.00527EPSS
SaveExploits1
CNVD
CNVD
added 2021/12/24 12:00 a.m.47 views

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. version 1.0 of Projectworlds Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers to compromise database system and in some cases use this vulnerability t...

8.8CVSS5AI score0.02003EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/12/24 12:00 a.m.51 views

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...

9.8CVSS4AI score0.0113EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/22 6:15 p.m.26 views

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

6.5CVSS0.00527EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/22 6:15 p.m.29 views

CVE-2021-43158

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cartremove.php allows a remote attacker to remove any product in the customer's cart...

4.3CVSS0.00454EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/22 6:15 p.m.31 views

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

9.8CVSS0.0113EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/22 6:15 p.m.13 views

CVE-2021-43631

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/22 6:15 p.m.12 views

CVE-2021-43629

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in adminhome.php...

9.8CVSS7.3AI score0.0113EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/22 6:15 p.m.10 views

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

6.5CVSS5.8AI score0.00527EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/22 6:15 p.m.13 views

CVE-2021-43158

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cartremove.php allows a remote attacker to remove any product in the customer's cart...

4.3CVSS5.8AI score0.00454EPSS
SaveExploits1References2
attackerkb
attackerkb
added 2021/12/22 6:15 p.m.6 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS7.3AI score0.0113EPSS
SaveExploits1References3
NVD
NVD
added 2021/12/22 6:15 p.m.26 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS0.0113EPSS
SaveExploits1References2
attackerkb
attackerkb
added 2021/12/22 6:15 p.m.7 views

CVE-2021-43156

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

6.5CVSS6.7AI score0.00527EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/22 6:15 p.m.25 views

Cross site request forgery (csrf)

In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admindelete.php allows a remote attacker to delete any book...

4.3CVSS6.5AI score0.00527EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/22 6:15 p.m.25 views

Sql injection

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

7.5CVSS9.7AI score0.0113EPSS
SaveExploits1References2Affected Software1
Prion
Prion
added 2021/12/22 6:15 p.m.21 views

Cross site request forgery (csrf)

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cartremove.php allows a remote attacker to remove any product in the customer's cart...

4.3CVSS4.7AI score0.00454EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/12/22 5:27 p.m.33 views

CVE-2021-43158

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cartremove.php allows a remote attacker to remove any product in the customer's cart...

5AI score0.00454EPSS
SaveExploits1References2
CVE
CVE
added 2021/12/22 5:27 p.m.64 views

CVE-2021-43158

CVE-2021-43158 refers to a CSRF vulnerability in the ProjectWorlds Online Shopping System PHP 1.0, specifically in cart_remove.php, that enables a remote attacker to remove any product from a customer’s cart. The vulnerability is documented across multiple sources (NVD entry and CNVD/CVE records)...

4.3CVSS4.7AI score0.00454EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder