CVE-2025-12862

CVE-2025-12862 affects projectworlds Online Notes Sharing Platform 1.0. The vulnerability is in the file /dashboard/userprofile.php where manipulation of the image argument enables unrestricted file uploads. The issue is exploitable remotely and an exploit is publicly available. Multiple connecte...

CVE-2025-8946

Summary: CVE-2025-8946 affects projectworlds Online Notes Sharing Platform 1.0. The vulnerability resides in the file /login.php where manipulation of the User parameter enables SQL injection. This can be exploited remotely and the exploit has been disclosed publicly. Root cause in the provided d...