CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 28/09/2023 |
| CVE-2023-43014 | 高危8.8 | Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the 'first_name' and 'last_name' parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
| 28/09/2023 |
| CVE-2023-5185 | 高危8.8 | Gym Management System Project v1.0 is vulnerable to
an Insecure File Upload vulnerability on the 'file'
parameter of profile/i.php page, allowing an
authenticated attacker to obtain Remote Code Execution
on the server hosting the application.
| 28/09/2023 |
| CVE-2023-5053 | 严重9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-5004 | 严重9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-44173 | 中危5.4 | Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Reflected Cross-Site Scripting vulnerability.
| 28/09/2023 |
| CVE-2023-43740 | 高危8.8 | Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of
admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting
the application.
| 28/09/2023 |
| CVE-2023-43013 | 严重9.8 | Asset Management System v1.0 is vulnerable to an
unauthenticated SQL Injection vulnerability on the
'email' parameter of index.php page, allowing an
external attacker to dump all the contents of the
database contents and bypass the login control.
| 28/09/2023 |
| CVE-2023-43144 | 严重9.8 | Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. | 22/09/2023 |
| CVE-2022-42066 | 中危6.1 | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. | 14/10/2022 |
| CVE-2021-45852 | 中危5.3 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php. | 16/03/2022 |
| CVE-2021-44866 | 高危7.5 | An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database. | 03/02/2022 |
| CVE-2021-46024 | 严重9.8 | Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required. | 23/01/2022 |
| CVE-2021-46307 | 严重9.8 | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. | 21/01/2022 |
| CVE-2021-43631 | 严重9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php. | 22/12/2021 |
| CVE-2021-43630 | 高危8.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server. | 22/12/2021 |
| CVE-2021-43629 | 严重9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php. | 22/12/2021 |