CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 28/09/2023 |
| CVE-2023-43014 | HOCH8.8 | Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the 'first_name' and 'last_name' parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
| 28/09/2023 |
| CVE-2023-5185 | HOCH8.8 | Gym Management System Project v1.0 is vulnerable to
an Insecure File Upload vulnerability on the 'file'
parameter of profile/i.php page, allowing an
authenticated attacker to obtain Remote Code Execution
on the server hosting the application.
| 28/09/2023 |
| CVE-2023-5053 | KRITISCH9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-5004 | KRITISCH9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-44173 | MITTEL5.4 | Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Reflected Cross-Site Scripting vulnerability.
| 28/09/2023 |
| CVE-2023-43740 | HOCH8.8 | Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of
admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting
the application.
| 28/09/2023 |
| CVE-2023-43013 | KRITISCH9.8 | Asset Management System v1.0 is vulnerable to an
unauthenticated SQL Injection vulnerability on the
'email' parameter of index.php page, allowing an
external attacker to dump all the contents of the
database contents and bypass the login control.
| 28/09/2023 |
| CVE-2023-43144 | KRITISCH9.8 | Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. | 22/09/2023 |
| CVE-2022-42066 | MITTEL6.1 | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. | 14/10/2022 |
| CVE-2021-45852 | MITTEL5.3 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php. | 16/03/2022 |
| CVE-2021-44866 | HOCH7.5 | An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database. | 03/02/2022 |
| CVE-2021-46024 | KRITISCH9.8 | Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required. | 23/01/2022 |
| CVE-2021-46307 | KRITISCH9.8 | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. | 21/01/2022 |
| CVE-2021-43631 | KRITISCH9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php. | 22/12/2021 |
| CVE-2021-43630 | HOCH8.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server. | 22/12/2021 |
| CVE-2021-43629 | KRITISCH9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php. | 22/12/2021 |