Filtered by vendor Projectworlds
Subscriptions
Total
91 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-46785 | 1 Projectworlds | 1 Online Matrimonial Project | 2024-09-17 | 9.8 Critical |
| Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partner_preference.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-46787 | 1 Projectworlds | 1 Online Matrimonial Project | 2024-09-17 | 9.8 Critical |
| Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45323 | 1 Projectworlds | 1 Online Food Ordering System | 2024-09-17 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'name' parameter of the routers/add-item.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45325 | 1 Projectworlds | 1 Online Food Ordering System | 2024-09-17 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'address' parameter of the routers/add-users.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45334 | 1 Projectworlds | 1 Online Food Ordering System | 2024-09-17 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'status' parameter of the routers/edit-orders.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45344 | 1 Projectworlds | 1 Online Food Ordering System | 2024-09-17 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_balance' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-46788 | 1 Projectworlds | 1 Online Matrimonial Project | 2024-09-17 | 9.8 Critical |
| Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter in the 'uploadphoto()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-46789 | 1 Projectworlds | 1 Online Matrimonial Project | 2024-09-17 | 9.8 Critical |
| Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-46793 | 1 Projectworlds | 1 Online Matrimonial Project | 2024-09-17 | 9.8 Critical |
| Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register()' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-48434 | 1 Projectworlds | 1 Online Voting System Project | 2024-09-13 | 9.8 Critical |
| Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the reg_action.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-44481 | 1 Projectworlds | 1 Leave Management System | 2024-09-12 | 8.8 High |
| Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setearnleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45338 | 1 Projectworlds | 1 Online Food Ordering Script | 2024-09-12 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45345 | 1 Projectworlds | 1 Online Food Ordering Script | 2024-09-12 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45346 | 1 Projectworlds | 1 Online Food Ordering Script | 2024-09-12 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_role' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-45347 | 1 Projectworlds | 1 Online Food Ordering Script | 2024-09-12 | 9.8 Critical |
| Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The '*_verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-46677 | 1 Projectworlds | 1 Online Job Portal | 2024-09-12 | 9.8 Critical |
| Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname' parameter of the sign-up.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-46679 | 1 Projectworlds | 1 Online Job Portal | 2024-09-12 | 9.8 Critical |
| Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname_email' parameter of the index.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-44480 | 1 Projectworlds | 1 Leave Management System | 2024-09-09 | 8.8 High |
| Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleaves.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-44267 | 1 Projectworlds | 1 Online Art Gallery | 2024-09-09 | 9.8 Critical |
| Online Art Gallery v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'lnm' parameter of the header.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-44484 | 1 Projectworlds | 1 Online Blood Donation Management System | 2024-09-06 | 6.1 Medium |
| Online Blood Donation Management System v1.0 is vulnerable to a Stored Cross-Site Scripting vulnerability. The 'firstName' parameter of the users/register.php resource is copied into the users/member.php document as plain text between tags. Any input is echoed unmodified in the users/member.php response. | ||||