CVE-2024-0498

CVE-2024-0498 affects Project Worlds Lawyer Management System v1.0. The vulnerability is in the file searchLawyer.php, where manipulation of the experience parameter enables SQL injection and can be exploited remotely. Public disclosure is noted. The issue is labeled critical in the baseline desc...

CVE-2025-3170

The vulnerability CVE-2025-3170 affects Project Worlds Online Lawyer Management System 1.0, specifically the /admin_user.php component. The root cause is improper handling of the block_id/unblock_id parameters, leading to a SQL injection vulnerability. The issue is exploitable remotely and has be...

CVE-2025-3173

CVE-2025-3173 affects Project Worlds Online Lawyer Management System 1.0. The vulnerability is in an unknown function of the file /save_booking.php, where manipulating the arguments lawyer_id and description enables a SQL injection. It is exploitable remotely and exploits have been disclosed publ...

CVE-2025-3174

CVE-2025-3174 affects Project Worlds Online Lawyer Management System 1.0. The vulnerability lies in the /searchLawyer.php functionality where the integer/string parameter named experience can be manipulated to cause an SQL injection. This can be triggered remotely, and exploitation has been discl...

CVE-2025-3171

Project Worlds Online Lawyer Management System 1.0 contains a SQL injection vulnerability in the /approve_lawyer.php handler, exploitable via the unblock_id parameter. The issue is triggered remotely and is confirmed across multiple feeds (NVD, Red Hat, CVE listings, etc.), with disclosures indic...

CVE-2024-0266

Project Worlds Online Lawyer Management System 1.0 has a cross-site scripting vulnerability in the User Registration component, caused by unsanitized input in the First Name field. The vulnerability can be exploited remotely and exploits have been disclosed publicly. The affected functionality is...

CVE-2025-4931

The CVE-2025-4931 entry affects projectworlds Online Lawyer Management System 1.0. The vulnerability is in the /user_registation.php function where manipulating the email parameter causes an SQL injection. Multiple sources confirm remote access and public disclosure of the exploit. No concrete fi...

CVE-2025-4932

Projectworlds Online Lawyer Management System 1.0 is affected by a SQL injection in the /lawyer_registation.php script caused by unsanitized input of the email parameter. The issue allows remote exploitation, and public disclosure of the exploit is noted across sources. If a fix/version is unavai...

CVE-2026-4626

CVE-2026-4626 affects the projectworlds Lawyer Management System 1.0. The vulnerability is a cross-site scripting (XSS) flaw triggered by manipulating the Description argument in the /lawyer_booking.php endpoint (also referred to as /lawyer booking.php in other sources). The issue is exploitable ...

CVE-2026-4596

CVE-2026-4596 affects the projectworlds Lawyer Management System 1.0. The vulnerability is a cross-site scripting flaw in processing the argument first_Name in the file /lawyers.php, enabling remote exploitation. Exploit is publicly available per provided sources. No remediation or specific fixes...