Skip to content

Project Worlds · weakness class

SQL Injection

130 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 130 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.CVE-2024-36597Projectworlds · CVSS 8.8 · 2.3% likely

    CWE-89

  2. Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.CVE-2023-43144Projectworlds · 1.1% likely

    CWE-89

  3. Project Worlds Car Rental Project approve.php sql injectionCVE-2025-4457Project Worlds · CVSS 7.3 · 1.0% likely

    CWE-89

  4. Project Worlds Car Rental Project signup.php sql injectionCVE-2025-4456Project Worlds · CVSS 7.3 · 1.0% likely

    CWE-89

  5. SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.CVE-2024-51326Projectworlds · CVSS 7.5 · 0.9% likely

    CWE-89

  6. SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoi…CVE-2024-22983Projectworlds · CVSS 8.1 · 0.8% likely

    CWE-89

  7. SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password'…CVE-2024-51327Projectworlds · CVSS 9.8 · 0.8% likely

    CWE-89

  8. projectworlds Online Admission System adminlogin.php sql injectionCVE-2025-8471projectworlds · CVSS 7.3 · 0.8% likely

    CWE-89

  9. Project Worlds Online Time Table Generator index.php sql injectionCVE-2025-2661Project Worlds · CVSS 7.3 · 0.7% likely

    CWE-89

  10. projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injectionCVE-2025-3185projectworlds · CVSS 7.3 · 0.7% likely

    CWE-89

  11. projectworlds Online Doctor Appointment Booking System getschedule.php sql injectionCVE-2025-3182projectworlds · CVSS 7.3 · 0.7% likely

    CWE-89

  12. projectworlds Online Hotel Booking login.php sql injectionCVE-2025-1965projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  13. projectworlds Online Hotel Booking booknow.php sql injectionCVE-2025-1964projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  14. Project Worlds Simple Web-Based Chat Application index.php sql injectionCVE-2024-10432Project Worlds · CVSS 7.3 · 0.6% likely

    CWE-89

  15. Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.CVE-2024-42843Projectworlds · CVSS 9.8 · 0.6% likely

    CWE-89

  16. projectworlds Online Doctor Appointment Booking System profile.php sql injectionCVE-2025-3184projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  17. projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injectionCVE-2025-3183projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  18. projectworlds Online Doctor Appointment Booking System appointment.php sql injectionCVE-2025-3181projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  19. projectworlds Online Doctor Appointment Booking System deleteschedule.php sql injectionCVE-2025-3180projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  20. projectworlds Online Doctor Appointment Booking System deletepatient.php sql injectionCVE-2025-3179projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  21. projectworlds Online Doctor Appointment Booking System deleteappointment.php sql injectionCVE-2025-3178projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  22. Project Worlds Online Lawyer Management System admin_user.php sql injectionCVE-2025-3170Project Worlds · CVSS 7.3 · 0.6% likely

    CWE-89

  23. Project Worlds Online Time Table Generator studentdashboard.php sql injectionCVE-2025-2662Project Worlds · CVSS 6.3 · 0.6% likely

    CWE-89

  24. projectworlds Online Hotel Booking reservation.php sql injectionCVE-2025-1963projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  25. projectworlds Student Project Allocation System make_group_sql.php sql injectionCVE-2025-4837projectworlds · CVSS 7.3 · 0.6% likely

    CWE-89

  26. Project Worlds Online Time Table Generator course_ajax.php sql injectionCVE-2024-0730Project Worlds · CVSS 6.3 · 0.6% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in