Project Worlds · weakness class
SQL Injection
130 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 130 is a mark on the map. Named now: 1 to 26, most at risk first.
- Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.
- Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.
- Project Worlds Car Rental Project approve.php sql injection
- Project Worlds Car Rental Project signup.php sql injection
- SQL Injection vulnerability in projectworlds Travel management System v.1.0 allows a remote attacker to execute arbitrary code via the 't2' parameter in deletesubcategory.php.
- SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoi…
- SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password'…
- projectworlds Online Admission System adminlogin.php sql injection
- Project Worlds Online Time Table Generator index.php sql injection
- projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection
- projectworlds Online Doctor Appointment Booking System getschedule.php sql injection
- projectworlds Online Hotel Booking login.php sql injection
- projectworlds Online Hotel Booking booknow.php sql injection
- Project Worlds Simple Web-Based Chat Application index.php sql injection
- Projectworlds Online Examination System v1.0 is vulnerable to SQL Injection via the subject parameter in feed.php.
- projectworlds Online Doctor Appointment Booking System profile.php sql injection
- projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection
- projectworlds Online Doctor Appointment Booking System appointment.php sql injection
- projectworlds Online Doctor Appointment Booking System deleteschedule.php sql injection
- projectworlds Online Doctor Appointment Booking System deletepatient.php sql injection
- projectworlds Online Doctor Appointment Booking System deleteappointment.php sql injection
- Project Worlds Online Lawyer Management System admin_user.php sql injection
- Project Worlds Online Time Table Generator studentdashboard.php sql injection
- projectworlds Online Hotel Booking reservation.php sql injection
- projectworlds Student Project Allocation System make_group_sql.php sql injection
- Project Worlds Online Time Table Generator course_ajax.php sql injection
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.