1000projects vulnerabilities
Published CVEs affecting 1000projects products: 4 record(s), with severity, exploitation and fixes.
Portfolio Management System MCA 2Bookstore Management System 1Design & Development Of Student Database Management System 1
CVE-2026-7144
Medium · 4.3
CWE-285 Apr 27, 2026
1000 Projects Portfolio Management System MCA update_passwd_process.php authorization
A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-7143
Medium · 6.3
CWE-74 Apr 27, 2026
1000 Projects Portfolio Management System MCA block_status.php sql injection
A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.
CVE-2025-13289
High · 8.8
CWE-89 Nov 17, 2025
1000projects Design & Development of Student Database Management System SubjectDetails.php sql injection
A vulnerability was detected in 1000projects Design & Development of Student Database Management System 1.0. Affected is an unknown function of the file /TeacherLogin/Academics/SubjectDetails.php. The manipulation of the argument SubCode results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.
CVE-2025-10833
Critical · 9.8
CWE-74 Sep 23, 2025
1000projects Bookstore Management System login.php sql injection
A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.