Projectworlds vulnerabilities
Published CVEs affecting Projectworlds products: 52 record(s), with severity, exploitation and fixes.
Advanced Library Management System 17Online Art Gallery Shop 5Expense Management System 4House Rental and Property Listing 3House Rental And Property Listing Project 3Online Shopping System 2Lawyer Management System 2Car Rental System 2Online Art Gallery Shop Project 2Car Rental Project 2Online Lawyer Management System 2Online Time Table Generator 2Online Food Ordering System 2Gate Pass Management System 2Online Admission System 1Online Notes Sharing Platform 1Online Tours And Travels 1Hospital-management-system-in-php 1Visitor Management System 1Online Notes Sharing System 1Can Pass Malicious Payloads 1Online Ordering Food System 1Online Examination System 1
CVE-2025-11070
Critical · 9.8
CWE-74 Sep 27, 2025
Projectworlds Online Shopping System cart_add.php sql injection
A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cart_add.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
CVE-2025-11067
Medium · 4.8
CWE-79 Sep 27, 2025
Projectworlds Visitor Management System Add Visitor myform.php cross site scripting
A vulnerability has been found in Projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /myform.php of the component Add Visitor Page. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.