CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 28/09/2023 |
| CVE-2023-43014 | 높음8.8 | Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the 'first_name' and 'last_name' parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
| 28/09/2023 |
| CVE-2023-5185 | 높음8.8 | Gym Management System Project v1.0 is vulnerable to
an Insecure File Upload vulnerability on the 'file'
parameter of profile/i.php page, allowing an
authenticated attacker to obtain Remote Code Execution
on the server hosting the application.
| 28/09/2023 |
| CVE-2023-5053 | 심각9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-5004 | 심각9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-44173 | 보통5.4 | Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Reflected Cross-Site Scripting vulnerability.
| 28/09/2023 |
| CVE-2023-43740 | 높음8.8 | Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of
admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting
the application.
| 28/09/2023 |
| CVE-2023-43013 | 심각9.8 | Asset Management System v1.0 is vulnerable to an
unauthenticated SQL Injection vulnerability on the
'email' parameter of index.php page, allowing an
external attacker to dump all the contents of the
database contents and bypass the login control.
| 28/09/2023 |
| CVE-2023-43144 | 심각9.8 | Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. | 22/09/2023 |
| CVE-2022-42066 | 보통6.1 | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. | 14/10/2022 |
| CVE-2021-45852 | 보통5.3 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php. | 16/03/2022 |
| CVE-2021-44866 | 높음7.5 | An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database. | 03/02/2022 |
| CVE-2021-46024 | 심각9.8 | Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required. | 23/01/2022 |
| CVE-2021-46307 | 심각9.8 | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. | 21/01/2022 |
| CVE-2021-43631 | 심각9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php. | 22/12/2021 |
| CVE-2021-43630 | 높음8.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server. | 22/12/2021 |
| CVE-2021-43629 | 심각9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php. | 22/12/2021 |