Projectworlds Security Vulnerabilities (CVEs)
Track 128 security vulnerabilities affecting Projectworlds products and software. Get instant email alerts when new CVEs are discovered, automated security monitoring, and patch guidance.
Online Food Ordering System v1.0 contains unauthenticated SQL injection vulnerabilities in the routers/user-router.php resource. Attackers can execute...
Nov 2, 2023Online Food Ordering System v1.0 has unauthenticated SQL injection vulnerabilities in the '*_balance' parameter of routers/user-router.php. Attackers ...
Nov 2, 2023Online Food Ordering System v1.0 has unauthenticated SQL injection vulnerabilities in the 'status' parameter of routers/edit-orders.php. Attackers can...
Nov 2, 2023Online Food Ordering System v1.0 has unauthenticated SQL injection vulnerabilities in the routers/router.php resource, allowing attackers to execute a...
Nov 2, 2023Online Food Ordering System v1.0 has unauthenticated SQL injection vulnerabilities in the 'phone' parameter of routers/details-router.php, allowing at...
Nov 2, 2023Online Food Ordering System v1.0 has unauthenticated SQL injection vulnerabilities in the phone parameter of the registration router. Attackers can ex...
Nov 2, 2023Online Food Ordering System v1.0 contains unauthenticated SQL injection vulnerabilities in the routers/add-users.php endpoint. Attackers can exploit t...
Nov 2, 2023Online Art Gallery v1.0 contains unauthenticated SQL injection vulnerabilities in the 'lnm' parameter of header.php. Attackers can execute arbitrary S...
Oct 26, 2023This CVE describes an SQL injection vulnerability in the Email parameter of process_login.php. Attackers can inject malicious SQL commands to manipula...
Sep 28, 2023This is a SQL injection vulnerability in the 'age' parameter of process_registration.php that allows attackers to execute arbitrary SQL commands on th...
Sep 28, 2023Asset Management System v1.0 contains an unauthenticated SQL injection vulnerability in the email parameter of index.php. This allows attackers to ext...
Sep 28, 2023This CVE describes an SQL injection vulnerability in a hospital management system that allows attackers to bypass authentication. Attackers can exploi...
Sep 28, 2023Gym Management System Project v1.0 has an insecure file upload vulnerability that allows authenticated attackers to upload malicious files and execute...
Sep 28, 2023This CVE describes a SQL injection vulnerability in Online-Movie-Ticket-Booking-System 1.0 where the about.php file fails to validate the 'id' paramet...
Feb 3, 2022This CVE describes an unauthenticated SQL injection vulnerability in Projectworlds online-shopping-webvsite-in-php version 1.0. Attackers can exploit ...
Jan 23, 2022This SQL injection vulnerability in Projectworlds Online Examination System 1.0 allows attackers to execute arbitrary SQL commands via the eid paramet...
Jan 21, 2022CVE-2021-43155 is a critical SQL injection vulnerability in Projectsworlds Online Book Store PHP v1.0 that allows attackers to execute arbitrary SQL c...
Dec 22, 2021CVE-2021-43157 is a critical SQL injection vulnerability in Projectsworlds Online Shopping System PHP 1.0 that allows attackers to execute arbitrary S...
Dec 22, 2021CVE-2021-43628 is a critical SQL injection vulnerability in Projectworlds Hospital Management System v1.0 that allows attackers to execute arbitrary S...
Dec 22, 2021CVE-2021-43630 is a SQL injection vulnerability in Projectworlds Hospital Management System v1.0 that allows authenticated attackers to execute arbitr...
Dec 22, 2021This vulnerability allows attackers to execute arbitrary SQL commands through the appointment_no parameter in payment.php. It affects Hospital Managem...
Dec 22, 2021CVE-2020-19108 is a critical SQL injection vulnerability in Online Book Store v1.0 that allows remote attackers to execute arbitrary SQL commands thro...
May 6, 2021This CVE describes a SQL injection vulnerability in Online Book Store v1.0, allowing remote attackers to execute arbitrary SQL commands via the bookis...
May 6, 2021This vulnerability allows remote attackers to bypass authentication in Online Book Store v1.0 via the admin_verify.php file, enabling unauthorized acc...
May 6, 2021This vulnerability allows attackers to upload arbitrary files to the Online Book Store v1.0 web application through the admin_add.php endpoint. Succes...
May 6, 2021This CVE describes a SQL injection vulnerability in Online Book Store v1.0 that allows remote attackers to execute arbitrary SQL commands via the publ...
May 6, 2021This CVE describes a SQL injection vulnerability in Online Book Store v1.0 that allows attackers to execute arbitrary SQL commands through the isbn pa...
May 6, 2021This vulnerability allows unauthenticated attackers to upload arbitrary files to the Vehicle Image Upload component in Car Rental Management System v1...
Sep 9, 2020Why Monitor Projectworlds Security Vulnerabilities?
Real-time CVE tracking: Our automated system monitors 128+ known vulnerabilities affecting Projectworlds products and software packages. Stay ahead of emerging threats with instant email notifications when new security issues are discovered.
Automated security monitoring: Unlike manual CVE checking, FixTheCVE automatically scans your servers and detects vulnerable Projectworlds packages in under 60 seconds. No agents required - completely agentless scanning that works across Projectworlds deployments.
Free vulnerability database: Access detailed information about every Projectworlds CVE including CVSS scores, severity ratings, affected versions, and actionable patch guidance. Filter by critical, high, medium, or low severity to prioritize your security remediation efforts.
🚀 Get Started in 60 Seconds
- Register free account & add your servers
- Run one-time scan or schedule automatic monitoring (every 1-24 hours)
- Receive instant alerts when new Projectworlds CVEs affect your systems
- Access dashboard with severity breakdown & fix instructions