CVE-2024-36597

CVE-2024-36597 affects Aegon Life v1.0 (Life Insurance Management System). A SQL injection flaw exists in the clientStatus.php endpoint via the client_id parameter. CVSSv3.1 base score 8.8 (HIGH): Network attack vector, low attack complexity, privileges required: LOW, no user interaction. Impacts...

CVE-2025-2067

CVE-2025-2067 affects projectworlds Life Insurance Management System 1.0. The issue arises from manipulating a key parameter in the server-side processing of /search.php, enabling a SQL injection. The vulnerability appears to be exploitable remotely and has publicly disclosed exploits. Multiple c...

CVE-2025-2063

CVE-2025-2063 affects Projectworlds Life Insurance Management System 1.0. The vulnerability is an SQL injection in an unknown functionality of the file /deleteNominee.php caused by manipulating the nominee_id parameter. The issue can be exploited remotely, and public disclosures exist. Connected ...

CVE-2025-2064

CVE-2025-2064 affects Projectworlds Life Insurance Management System 1.0. Vulnerable component: the file /deletePayment.php, where manipulation of the recipt_no argument enables SQL injection. The issue is exploitable remotely; exploitation information is publicly available. Root cause identified...

CVE-2025-2062

CVE-2025-2062 affects projectworlds Life Insurance Management System 1.0. The vulnerability is in an unknown function of /clientStatus.php where manipulating the client_id parameter triggers a SQL injection. Exploitation is remote, and the vulnerability has been publicly disclosed by multiple sou...

CVE-2025-2065

CVE-2025-2065 affects the projectworlds Life Insurance Management System 1.0. A vulnerable component is the unknown part of the file /editAgent.php, where manipulation of the agent_id parameter leads to an SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicl...

CVE-2025-2066

CVE-2025-2066 affects Projectworlds Life Insurance Management System 1.0, with the vulnerability located in /updateAgent.php where manipulating the agent_id parameter enables SQL injection. This issue can be exploited remotely and has publicly disclosed exploit information. Multiple sources confi...

CVE-2025-6135

CVE-2025-6135 affects Projectworlds Life Insurance Management System v1.0. The vulnerability resides in /insertNominee.php, where manipulation of the arguments client_id/nominee_id enables SQL injection. Reports indicate remote exploitation with the exploit disclosed publicly. Affected components...

CVE-2024-10735

CVE-2024-10735 affects Project Worlds Life Insurance Management System 1.0. The vulnerability is in the file /editNominee.php, where manipulation of the nominee_id parameter leads to an SQL injection. The issue is remotely exploitable and publicly disclosed. Affected scope is the system’s ability...

CVE-2024-10734

CVE-2024-10734 affects Project Worlds Life Insurance Management System v1.0. A vulnerability in /editPayment.php where the recipt_no parameter can be manipulated to trigger SQL injection. Exploitation is possible remotely, and public exploit information exists. The issue impacts confidentiality, ...

CVE-2025-4836

CVE-2025-4836 affects Projectworlds Life Insurance Management System v1.0. The vulnerability is an SQL injection in /deleteAgent.php triggered by manipulating the agent_id parameter. Impact is remote exploitation with potential confidentiality/integrity/availability loss as described in multiple ...

CVE-2025-6136

Projectworlds Life Insurance Management System 1.0 contains a SQL injection in /insertPayment.php caused by manipulating the recipt_no parameter. This vulnerability can be exploited remotely and has had publicly disclosed exploits. Mitigation available in the connected PT-2025-25584 entry suggest...

CVE-2025-6133

Projectworlds Life Insurance Management System 1.0 contains a SQL injection in /insertagent.php via the agent_id parameter. The vulnerability, described as critical, may be exploitable remotely and is supported by publicly disclosed PoCs. Multiple connected sources confirm the issue without a kno...

CVE-2025-6134

Projectworlds Life Insurance Management System 1.0 contains a SQL injection vulnerability in /insertClient.php, caused by manipulation of the client_id parameter. Remote exploitation is possible, and public disclosures exist. Other parameters may be affected. Connected sources note a remediation ...