CVE-2021-43158: Cross-Site Request Forgery (CSRF)

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cartremove.php allows a remote attacker to remove any product in the customer's cart...

CVE-2021-43631: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

PT-2021-23893

Name of the Vulnerable Software and Affected Versions: Projectworlds Hospital Management System version 1.0 Description: The issue concerns SQL injection via the email parameter in the hms-staff.php file. This allows for potential data manipulation or unauthorized access. Recommendations: For...

PT-2021-23896

Name of the Vulnerable Software and Affected Versions: Projectworlds Hospital Management System version 1.0 Description: The issue allows for SQL injection via the appointment no parameter in the "payment.php" endpoint. Recommendations: For Projectworlds Hospital Management System version 1.0,...

PT-2021-23894

Name of the Vulnerable Software and Affected Versions: Projectworlds Hospital Management System version 1.0 Description: The issue concerns SQL injection vulnerability via multiple parameters in the admin home.php file. Recommendations: For Projectworlds Hospital Management System version 1.0,...

PT-2021-23754

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Book Store PHP version 1.0 Description A CSRF issue in the admin delete.php file allows a remote attacker to delete any book. Recommendations For ProjectWorlds Online Book Store PHP version 1.0, consider implementing prope...

Projectworlds Hospital Management System SQL注入漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria.Projectworlds Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2021-43630: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in addpatient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web...

PT-2021-23756

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Shopping System PHP version 1.0 Description A CSRF issue in the cart remove.php file allows a remote attacker to remove any product from a customer's cart. Recommendations For ProjectWorlds Online Shopping System PHP versi...

Projectworlds Hospital Management System SQL注入漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. v1.0 of Projectworlds Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers to Execute illegal SQL commands to steal sensitive database data...

Projectworlds Online Shopping System SQL注入漏洞

Projectworlds Online Shopping System is an online shopping system from Projectworlds Austria. v1.0 of ProjectWorlds Online Shopping System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Projectworlds Online Examination System Cross-Site Request Forgery Vulnerability

Projectworlds Online Examination System is an online examination system. projectworlds Online Examination System cross-site request forgery vulnerability, which can be exploited by attackers to delete existing users...

ProjectWorlds College Management System Cross-Site Request Forgery Vulnerability

ProjectWorlds College Management System is a college management system. projectWorlds College Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to modify, delete student, faculty, teacher, subject, grade, location, and article data or create new...

CVE-2020-25408

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

CVE-2020-25408

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

CVE-2020-25408

CVE-2020-25408 affects ProjectWorlds College Management System Php 1.0. The CSRF vulnerability allows a remote attacker to modify, delete, or create new entries for student, faculty, teacher, subject, scores, location, and article data. The connected records confirm the CSRF issue across multiple...

CVE-2020-25411

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...

CVE-2020-25411

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...

CVE-2020-25411

CVE-2020-25411 : Projectworlds Online Examination System 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) , allowing a remote attacker to delete an existing user. Connected documents corroborate the CSRF root cause and the impact as user deletion. No concrete technical details (endpoints, p...