Projectworlds
Monthly
Reflected cross-site scripting in projectworlds Online Examination System 1.0 allows unauthenticated remote attackers to inject arbitrary JavaScript via the Name and Subject parameters of feedback.php. Exploitation delivers malicious script payload to any user whose browser renders the tampered response, enabling session hijacking, credential theft, or defacement within the application context. A public proof-of-concept exploit is available on GitHub; no CISA KEV listing has been identified at time of analysis.
SQL injection in Online Art Gallery Shop 1.0 allows unauthenticated remote attackers to manipulate database queries through the social_linked parameter in /admin/adminHome.php. The vulnerability has publicly available exploit code and a CVSS score of 7.3, indicating high severity with the ability to impact confidentiality, integrity, and availability of the application.
SQL injection in projectworlds Hospital Management System in PHP 1.0 enables unauthenticated remote attackers to extract or modify patient data through the appointment_no parameter in update_info.php. The vulnerability has publicly available exploit code and affects the getAllPatientDetail function, with the vendor notified but unresponsive.
SQL injection in projectworlds Car Rental System 1.0 allows unauthenticated remote attackers to manipulate database queries via the mpesa parameter in /pay.php. The vulnerability carries a CVSS score of 7.3 with network-based exploitation requiring low complexity and no user interaction. Publicly available exploit code exists (GitHub POC published), significantly lowering the barrier to exploitation, though no CISA KEV listing confirms active widespread exploitation at time of analysis.
SQL injection in projectworlds Car Rental System 1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands via the Message parameter in /message_admin.php. Publicly available exploit code exists, significantly lowering the barrier to exploitation. The vulnerability enables unauthorized data access, modification, and potential denial of service against the administrative messaging interface. CVSS 7.3 severity reflects network-accessible attack vector with low complexity and no authentication requirement.
SQL injection in projectworlds Car Rental Project 1.0 allows remote attackers to execute arbitrary SQL queries via the fname parameter in /book_car.php, enabling unauthenticated database manipulation with potential confidentiality and integrity impact. The vulnerability has publicly available exploit code and a moderate CVSS score of 6.9, indicating practical exploitability despite low attack complexity.
SQL injection in projectworlds Car Rental Project 1.0 login.php allows unauthenticated remote attackers to bypass authentication, extract sensitive database contents, and potentially modify or delete data via the 'uname' parameter. Publicly available exploit code exists (GitHub POC published), significantly lowering the barrier to exploitation. EPSS data not available, but the combination of network-accessible attack vector, no authentication requirement, and public exploit makes this a practical threat for internet-facing deployments of this vulnerable application.
A stored cross-site scripting (XSS) vulnerability exists in projectworlds Lawyer Management System version 1.0 within the /lawyer_booking.php file, where the Description parameter fails to sanitize user input before rendering. An authenticated attacker can inject malicious JavaScript that executes in the context of other users' browsers, potentially leading to session hijacking, credential theft, or unauthorized actions. A proof-of-concept exploit has been publicly disclosed on GitHub, and the vulnerability carries a CVSS score of 3.5 with evidence of public exploitation.
A stored or reflected cross-site scripting (XSS) vulnerability exists in projectworlds Lawyer Management System version 1.0, specifically in the /lawyers.php file where the first_Name parameter is inadequately sanitized. An authenticated attacker can inject malicious JavaScript that executes in the context of other users' browsers, potentially stealing session tokens or performing unauthorized actions. A public proof-of-concept exploit is available, and exploitation requires only low complexity with user interaction (UI:R), though the attack vector is network-accessible and does not require high privileges.
SQL injection in projectworlds Online Notes Sharing System 1.0 allows unauthenticated remote attackers to manipulate the Benutzer parameter in /login.php, enabling unauthorized data access, modification, or denial of service. Public exploit code exists for this vulnerability, and no patch is currently available.
SQL injection in projectworlds Online Art Gallery Shop 1.0 via the reach_nm parameter in /admin/adminHome.php allows unauthenticated remote attackers to manipulate database queries and potentially extract sensitive data or modify database contents. Public exploit code exists for this vulnerability, increasing exploitation risk. No patch is currently available for affected installations.
SQL injection in projectworlds Online Art Gallery Shop 1.0 allows unauthenticated remote attackers to manipulate the Info parameter in /admin/adminHome.php, potentially enabling unauthorized database access and data theft. Public exploit code exists for this vulnerability, increasing the risk of active exploitation. No patch is currently available, requiring organizations to implement compensating controls or upgrade to a patched version when released.
SQL injection in projectworlds Online Art Gallery Shop 1.0 allows unauthenticated remote attackers to manipulate the fnm parameter via the /?pass=1 endpoint, potentially enabling unauthorized database access and modification. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected installations at immediate risk.
SQL injection in Online Art Gallery Shop 1.0 via the fname parameter in /admin/registration.php enables unauthenticated remote attackers to manipulate database queries. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected PHP installations at immediate risk of data compromise or unauthorized access.
Online Time Table Generator versions up to 1.0 is affected by missing authentication for critical function (CVSS 7.5).
Missing authentication on multiple admin action scripts in ProjectWorlds Online Time Table Generator allows unauthenticated users to perform administrative operations. PoC available.
Online Food Ordering System versions up to 1.0 contains a vulnerability that allows attackers to sql injection (CVSS 7.3).
House Rental And Property Listing Project versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 3.5).
House Rental And Property Listing Project versions up to 1.0 is affected by improper access control (CVSS 7.3).
House Rental And Property Listing Project versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 2.4).
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate database queries via the roll_number parameter in /borrow_book.php. Public exploit code is available, though no active exploitation or vendor patch has been confirmed. The EPSS score indicates a very low probability of widespread exploitation at this time.
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the admin_id parameter in /view_admin.php. This can result in low-impact data disclosure, tampering, or denial of service against the backend database. While a public exploit exists, the vulnerability is not known to be actively exploited in the wild and has a very low EPSS score.
SQL injection in projectworlds Advanced Library Management System 1.0 allows unauthenticated remote attackers to compromise database integrity, confidentiality, and availability via the book_id parameter in /view_book.php. Public proof-of-concept exploit code exists, but the software's niche deployment footprint and low EPSS exploitation probability (0.05%) suggest limited real-world impact; no active exploitation is confirmed by CISA KEV.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject SQL via the roll_number parameter in /member_search.php. Exploit code is publicly available, but EPSS score is low (0.04%) and no active exploitation has been confirmed by CISA. Attackers may read, modify, or delete database entries depending on database user privileges.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the book_id parameter in /delete_book.php, potentially resulting in unauthorized data access or modification. No authentication is required, and public exploit code is available, as documented by VulDB and NVD.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate the user_id parameter in /delete_member.php, potentially leading to unauthorized database access or data modification. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%), and no active exploitation has been confirmed through CISA KEV.
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in projectworlds Advanced Library Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Online Admission System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in projectworlds Advanced Library Management System 1.0 exposes the application's database through the unsanitized `keywords` parameter on `/index.php`, exploitable by any unauthenticated remote attacker. The CVSS 4.0 score is 5.5 (Medium), with low-level confidentiality, integrity, and availability impact against the vulnerable system and no scope change to subsequent systems. A public proof-of-concept exploit exists (E:P in the provided vector), though EPSS sits at just 0.03% (9th percentile), consistent with the highly niche deployment footprint of this product; no public exploit identified at time of analysis for widespread campaigns.
Stored cross-site scripting in projectworlds Expense Management System 1.0 allows high-privileged authenticated users to inject malicious scripts via the Expense Categories creation page, affecting other users who view the poisoned content. The vulnerability requires administrator-level access and user interaction (rendering the page), limiting real-world impact despite remote network delivery. Publicly available exploit code exists; EPSS exploitation probability is very low at 0.03%, suggesting this is primarily a proof-of-concept risk rather than an actively exploited threat.
Stored cross-site scripting (XSS) in projectworlds Expense Management System 1.0 allows authenticated users with high privileges to inject malicious scripts via the Currency Page create function (/public/admin/currencies/create), which are then reflected to other users who interact with that page. The vulnerability requires user interaction and high-level administrative privileges to exploit, resulting in limited real-world risk despite public exploit availability and low EPSS score.
Stored cross-site scripting (XSS) in projectworlds Expense Management System 1.0 allows authenticated high-privilege users to inject malicious scripts via the Roles Page create endpoint (/public/admin/roles/create), which are then reflected to other users. The vulnerability requires high-privilege authentication and user interaction to trigger, limiting real-world exploitation despite public POC availability and network accessibility.
Stored cross-site scripting (XSS) in projectworlds Expense Management System 1.0 allows high-privileged authenticated users to inject malicious scripts via the /public/admin/users/create endpoint, which are executed in the browsers of other users viewing the affected page. The vulnerability requires administrator privileges and user interaction (clicking a link), significantly limiting exploitation scope despite remote accessibility and publicly available proof-of-concept code.
Stored cross-site scripting (XSS) in projectworlds Gate Pass Management System 1.0 allows authenticated users to inject malicious scripts via the /add-pass.php endpoint, which execute in the browsers of other users who view the affected content. The vulnerability requires user interaction (UI:P) and authenticated access (PR:L), limiting its scope to reflected or stored XSS within an authenticated session. Publicly available exploit code exists, though EPSS exploitation probability remains very low at 0.03%, suggesting limited real-world weaponization despite public disclosure.
SQL injection in projectworlds Online Shopping System 1.0 exposes database contents to unauthenticated remote attackers via the `keywords` parameter in `/login_submit.php`. The attack requires no credentials, no user interaction, and carries low access complexity, making it trivially scriptable against any exposed instance. Publicly available exploit code exists per a GitHub proof-of-concept, though the EPSS score of 0.03% (9th percentile) reflects the product's limited real-world deployment footprint; no confirmed active exploitation (CISA KEV) has been observed at time of analysis.
We need to produce a JSON object with the specified fields. All fields must be plain text strings, not arrays or objects. We synthesize from the given data: CVE-2025-11604. Given input: CVE ID: CVE-2025-11604 Description: A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. CVSS Score: 5.5 CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CWE: CWE-74 EPSS Score: 0.03% (percentile 9%) POC/Exploit: Publicly available Reported by: cna@vuldb.com CPE: cpe:2.3:a:projectworlds:online_food_ordering_system:1.0:*:*:*:*:*:*:* Tags: PHP, SQLi, Online Food Ordering System References: several URLs. KEV status not mentioned. So we assume not in KEV. POC publicly available. So exploitation status: "publicly available exploit code exists". Now, we need to craft the JSON. First field: product_name: "Online Ordering Food System" but must be 1-3 words. It's "Online Food Ordering System" from tags? The CPE product is "online_food_ordering_system". So product name: "Online Food Ordering System". Exactly. summary: Not copy description. Original synthesis. Must start with impact verb and product. Suggested: "SQL injection in Projectworlds Online Food Ordering System 1.0 allows remote attackers to manipulate the Status parameter in /all-orders.php, leading to unauthorized data access or modification." Mention no active exploitation detected, POC exists, low EPSS. "SQL injection in Projectworlds Online Food Ordering System 1.0 allows remote attackers to inject malicious SQL via the Status parameter in /all-orders.php, potentially reading or altering database contents. The vulnerability has a publicly available exploit, but no active exploitation has been confirmed by CISA, and EPSS estimates a low 0.03% probability of exploitation." technical_context: Underlying technology: PHP application, likely using MySQL. The vulnerability is SQL injection (CWE-89, but given CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'). That's a generic injection, but SQLi is specifically CWE-89. However, the CWE provided is CWE-74. We'll mention it. Root cause: improper sanitization of user input in the Status parameter leading to SQL injection. Affected product from CPE: projectworlds online_food_ordering_system version 1.0. The issue is in /all-orders.php. "Projectworlds Online Food Ordering System 1.0 is a PHP-based web application. The vulnerability exists in the /all-orders.php script, where the 'Status' argument is directly incorporated into an SQL query without proper sanitation, falling under CWE-74. This allows injection of arbitrary SQL commands via the affected parameter." risk_assessment: Compare CVSS vector (provided as CVSS:4.0, but we need to translate to 3.1 for analysis? We can interpret: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L ... This is low impact on confidentiality, integrity, availability. So a successful attack yields limited impact. EPSS 0.03% very low. No KEV. POC exists. SSVC: exploitation is "poc" (public proof of concept), not actively exploited; automatable? Probably automatable because it's a simple URL parameter injection, but we need to check CVSS AT:N so automatable. Technical impact: low (limited C/I/A). So it's a low risk, not a priority. CVSS gives base score 5.5 (medium) but real-world risk is minimal. Mention conflicts: none. "CVSS:4.0 vector indicates network attack with low impact on confidentiality, integrity, and availability, resulting in a medium base score (5.5). However, EPSS predicts only a 0.03% chance of exploitation, placing it in the 9th percentile — well below the threshold for active concern. No CISA KEV listing exists. While a public proof-of-concept exploit lowers the barrier to exploitation, the limited technical impact and low prevalence of this niche application keep real-world risk low. The SSVC decision would lean towards 'Track' rather than 'Act', as no active exploitation has been observed and impact is limited." affected_products: "Projectworlds Online Food Ordering System version 1.0 is affected (CPE: cpe:2.3:a:projectworlds:online_food_ordering_system:1.0). No vendor advisory or fix information is available from the references provided; the vulnerability is reported via VulDB (id 327926)." remediation: "No vendor patch is available at this time. As a workaround, implement input validation and parameterized queries for the Status parameter in /all-orders.php to neutralize SQL injection. Additionally, restrict access to the administrative or order management interface to trusted users, and consider web application firewall (WAF) rules to block SQL injection attempts. These mitigations may require code-level changes or external filters, with potential disruption if incorrectly configured." exploit_scenario: "An attacker sends a crafted HTTP request to the /all-orders.php endpoint with a maliciously modified Status parameter, injecting SQL commands. This could extract sensitive data from the application's database or manipulate order statuses. Since a public exploit is available, an unauthenticated remote attacker with network access could easily reproduce the attack." exploitation_conditions: The CVE description says: "This manipulation of the argument Status causes sql injection." No specific authentication or configuration mentioned. CVSS vector is AV:N/PR:N/UI:N, so remote unauthenticated. But we must note that it's a specific file /all-orders.php, likely part of an admin or backend interface. Maybe it requires some access? However, per CVSS PR:N so unauthenticated. We'll state: "The vulnerable script /all-orders.php is accessible without authentication, as indicated by the CVSS vector (PR:N). No special configuration is required for exploitation; the SQL injection is triggered by direct manipulation of the Status parameter in an HTTP request. There are no limiting conditions beyond the availability of the target application online." But if the file requires some prior session? Not indicated. So I'll say: "The vulnerability is exploitable remotely without authentication, as indicated by CVSS vector parameters. No specific user interaction or non-default configuration is necessary; the Status parameter in /all-orders.php is directly injectable." attack_chain: "Send HTTP request with SQLi payload to /all-orders.php?Status=... → Database interprets injected SQL → Extract or modify order data". That's 3 steps. More detailed: "Access /all-orders.php endpoint → Inject malicious SQL into Status parameter → Database executes injected query → Attacker reads or alters data". Use "Access → Inject → Execute → Impact" four steps. I'll go with: "Send crafted request to /all-orders.php → Inject SQL payload via Status parameter → Backend database executes injected query → Sensitive data exfiltration or order manipulation". That's three steps with arrows. The field asks for 3-7 short steps separated by " → ". So I'll do: "Send HTTP request with malicious Status parameter → SQL injection into database query → Unauthorized data access or modification." confidence_notes: "Exploit code publicly available on GitHub (Duo-zhen/CVE/issues/4), confirming reproducibility. No vendor advisory or patch information; affected version confirmed by CPE and VulDB entry. No CISA KEV listing, nor independent verification of active exploitation." Also mention that authentication requirements not explicitly confirmed from description but CVSS says PR:N. prevalence: The product is a niche PHP application from Projectworlds, likely used as a learning or demonstration project, not widely deployed in enterprise. So prevalence is low. "low". Justification: "niche PHP demo system, limited real-world deployments". So "low". prevalence_basis: "projectworlds' demo/tutorial-level application, not enterprise-scale" assessed_cvss_vector: My own CVSS 3.1 vector. Given AV:N, AC:L, PR:N, UI:N, S:U (no scope change), Confidentiality Low (limited read), Integrity Low (modify maybe), Availability Low (maybe no DoS but limited). So: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. That's base score 6.3? Wait actually C:L/I:L/A:L yields score 7.1? Let's compute: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L -> Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Base score: (N, L, N, N, U) using formula: Impact subscore (ISS) = 1 - (1-C)*(1-I)*(1-A) = 1 - 0.9*0.9*0.9 = 1 - 0.729 = 0.271. Impact = 6.42 * ISS = 6.42 * 0.271 = 1.74. Exploitability = 8.22 * AV:N * AC:L * PR:N * UI:N = 8.22 * 0.85 * 0.77 * 0.85 * 0.85? Wait formula: Exploitability = 8.22 * AttackVector * AttackComplexity * PrivilegesRequired * UserInteraction. For AV:N=0.85, AC:L=0.77, PR:N=0.85, UI:N=0.85 => Exploitability = 8.22 * 0.85 * 0.77 * 0.85 * 0.85 = 8.22 * 0.4727 ≈ 3.886. Base Score = if Impact subscore <=0, 0; else roundup(min(Impact + Exploitability, 10))? Actually if Scope Unchanged, Base Score = roundup(min(Impact + Exploitability, 10)). 1.74 + 3.886 = 5.626, round up 5.7? Wait rounding rules: round up to one decimal: 5.626 -> 5.7. That's medium. But the provided CVSS 4.0 score is 5.5. So 5.7 is close. However, a more accurate assessment: The given CVSS:4.0 has VC:L/VI:L/VA:L, so impacted components vulnerable system confidentiality, integrity, availability all low. That suggests the SQL injection could read some data, modify some data, and cause limited availability impact (maybe denial of service). So C:L/I:L/A:L is appropriate. So I'll use that vector. I'll justify: "Network-accessible, low complexity, no privileges or user interaction; limited impact on all three CIA dimensions." assessed_cvss_rationale: "Network-accessible, no auth or user interaction required; low impact on confidentiality, integrity, and availability." assessed_cvss40_vector: The provided vector is already CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N . I can use that exact vector as my assessment, as it is consistent. But the instruction says "Your OWN independent CVSS 4.0 base vector" – I can reuse the same one if I agree. I'll keep it because it accurately reflects the vulnerability: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. So I'll output that. assessed_cvss40_vector: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N". Rationale: "Matches the provided vector, reflecting remote unauthenticated access with limited impact on the vulnerable system." Now, put together all fields. All must be strings, no arrays. Let's craft each field accurately. product_name: "Online Food Ordering System" summary:
SQL injection in projectworlds Gate Pass Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the fullname parameter in /add-pass.php. Exploit code is publicly available; no active exploitation has been confirmed (not in CISA KEV). EPSS indicates a very low probability of widespread exploitation (0.03%), likely due to the product's limited deployment.
SQL injection in Advanced Library Management System 1.0 via the user_id parameter in view_member.php allows remote unauthenticated attackers to manipulate database queries, potentially reading, modifying, or deleting data. Exploit code is publicly available, but EPSS indicates very low exploitation likelihood and no active attacks have been reported.
Unrestricted file upload in projectworlds Advanced Library Management System 1.0 allows authenticated remote attackers to upload arbitrary files via the image parameter in /edit_book.php, resulting in low-impact confidentiality, integrity, and availability violations. Public exploit code is available, though EPSS exploitation probability remains very low at 0.05%, suggesting limited real-world attack incentive despite authentication requirement bypass potential.
Stored cross-site scripting in projectworlds Advanced Library Management System 1.0 allows authenticated users with high privileges to inject malicious scripts via the firstname parameter in /edit_admin.php, affecting other users who view admin profiles. Exploitation requires high-privilege authentication and user interaction (UI:P), limiting real-world impact despite network accessibility. Public exploit code exists and EPSS exploitation probability is minimal at 0.03%, suggesting this remains a low-priority vulnerability despite CVE assignment.
A security vulnerability has been detected in Projectworlds Online Tours and Travels 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Projectworlds Online Shopping System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Projectworlds Visitor Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Visitor Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Visitor Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Visitor Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Admission System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in projectworlds Online Admission System 1.0 exposes the `/adminac.php` endpoint to unauthenticated remote database manipulation via an unsanitized `id` parameter. Any internet-facing deployment of this PHP application allows an attacker to read, modify, or partially disrupt the underlying database without credentials. A public proof-of-concept exploit exists on GitHub, though EPSS exploitation probability sits at just 0.07% (22nd percentile), reflecting the product's extremely narrow deployment footprint rather than reduced exploitability of the flaw itself.
SQL injection in Projectworlds Online Admission System 1.0 allows authenticated remote attackers to manipulate the 'markof' parameter in /admin.php, leading to database queries with limited confidentiality and integrity impact. The vulnerability has publicly available exploit code, though actual exploitation appears limited given the low EPSS score (0.07%) and requirement for authenticated access, suggesting this affects only deployments where admin credentials are already compromised or accessible.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to manipulate the `recipt_no` parameter in `/insertPayment.php`, potentially leading to data breach or system compromise. A public exploit is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), suggesting limited exploitation likelihood.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the client_id or nominee_id parameters in /insertNominee.php. Public exploit code is available, but no active exploitation has been confirmed. EPSS score is low (0.07%), indicating limited exploitation likelihood.
SQL injection in Projectworlds Life Insurance Management System 1.0 enables remote attackers with low privileges to manipulate the client_id parameter in /insertClient.php, leading to unauthorized database access and potential data modification. Public exploit code is available, but EPSS indicates a low probability of widespread exploitation, and no active exploitation has been reported.
SQL injection in Projectworlds Life Insurance Management System 1.0 via the agent_id parameter in /insertagent.php allows authenticated remote attackers to manipulate database queries. Public exploit code is available, but no active exploitation has been confirmed. The vulnerability has low impact (C:L/I:L/A:L) and a very low EPSS score (0.06%), suggesting limited real-world risk.
A vulnerability was found in projectworlds Online Time Table Generator 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Food Ordering System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical has been found in projectworlds Student Project Allocation System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Hospital Database Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Examination System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical.php?patientId=1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Reflected cross-site scripting in projectworlds Online Examination System 1.0 allows unauthenticated remote attackers to inject arbitrary JavaScript via the Name and Subject parameters of feedback.php. Exploitation delivers malicious script payload to any user whose browser renders the tampered response, enabling session hijacking, credential theft, or defacement within the application context. A public proof-of-concept exploit is available on GitHub; no CISA KEV listing has been identified at time of analysis.
SQL injection in Online Art Gallery Shop 1.0 allows unauthenticated remote attackers to manipulate database queries through the social_linked parameter in /admin/adminHome.php. The vulnerability has publicly available exploit code and a CVSS score of 7.3, indicating high severity with the ability to impact confidentiality, integrity, and availability of the application.
SQL injection in projectworlds Hospital Management System in PHP 1.0 enables unauthenticated remote attackers to extract or modify patient data through the appointment_no parameter in update_info.php. The vulnerability has publicly available exploit code and affects the getAllPatientDetail function, with the vendor notified but unresponsive.
SQL injection in projectworlds Car Rental System 1.0 allows unauthenticated remote attackers to manipulate database queries via the mpesa parameter in /pay.php. The vulnerability carries a CVSS score of 7.3 with network-based exploitation requiring low complexity and no user interaction. Publicly available exploit code exists (GitHub POC published), significantly lowering the barrier to exploitation, though no CISA KEV listing confirms active widespread exploitation at time of analysis.
SQL injection in projectworlds Car Rental System 1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands via the Message parameter in /message_admin.php. Publicly available exploit code exists, significantly lowering the barrier to exploitation. The vulnerability enables unauthorized data access, modification, and potential denial of service against the administrative messaging interface. CVSS 7.3 severity reflects network-accessible attack vector with low complexity and no authentication requirement.
SQL injection in projectworlds Car Rental Project 1.0 allows remote attackers to execute arbitrary SQL queries via the fname parameter in /book_car.php, enabling unauthenticated database manipulation with potential confidentiality and integrity impact. The vulnerability has publicly available exploit code and a moderate CVSS score of 6.9, indicating practical exploitability despite low attack complexity.
SQL injection in projectworlds Car Rental Project 1.0 login.php allows unauthenticated remote attackers to bypass authentication, extract sensitive database contents, and potentially modify or delete data via the 'uname' parameter. Publicly available exploit code exists (GitHub POC published), significantly lowering the barrier to exploitation. EPSS data not available, but the combination of network-accessible attack vector, no authentication requirement, and public exploit makes this a practical threat for internet-facing deployments of this vulnerable application.
A stored cross-site scripting (XSS) vulnerability exists in projectworlds Lawyer Management System version 1.0 within the /lawyer_booking.php file, where the Description parameter fails to sanitize user input before rendering. An authenticated attacker can inject malicious JavaScript that executes in the context of other users' browsers, potentially leading to session hijacking, credential theft, or unauthorized actions. A proof-of-concept exploit has been publicly disclosed on GitHub, and the vulnerability carries a CVSS score of 3.5 with evidence of public exploitation.
A stored or reflected cross-site scripting (XSS) vulnerability exists in projectworlds Lawyer Management System version 1.0, specifically in the /lawyers.php file where the first_Name parameter is inadequately sanitized. An authenticated attacker can inject malicious JavaScript that executes in the context of other users' browsers, potentially stealing session tokens or performing unauthorized actions. A public proof-of-concept exploit is available, and exploitation requires only low complexity with user interaction (UI:R), though the attack vector is network-accessible and does not require high privileges.
SQL injection in projectworlds Online Notes Sharing System 1.0 allows unauthenticated remote attackers to manipulate the Benutzer parameter in /login.php, enabling unauthorized data access, modification, or denial of service. Public exploit code exists for this vulnerability, and no patch is currently available.
SQL injection in projectworlds Online Art Gallery Shop 1.0 via the reach_nm parameter in /admin/adminHome.php allows unauthenticated remote attackers to manipulate database queries and potentially extract sensitive data or modify database contents. Public exploit code exists for this vulnerability, increasing exploitation risk. No patch is currently available for affected installations.
SQL injection in projectworlds Online Art Gallery Shop 1.0 allows unauthenticated remote attackers to manipulate the Info parameter in /admin/adminHome.php, potentially enabling unauthorized database access and data theft. Public exploit code exists for this vulnerability, increasing the risk of active exploitation. No patch is currently available, requiring organizations to implement compensating controls or upgrade to a patched version when released.
SQL injection in projectworlds Online Art Gallery Shop 1.0 allows unauthenticated remote attackers to manipulate the fnm parameter via the /?pass=1 endpoint, potentially enabling unauthorized database access and modification. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected installations at immediate risk.
SQL injection in Online Art Gallery Shop 1.0 via the fname parameter in /admin/registration.php enables unauthenticated remote attackers to manipulate database queries. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected PHP installations at immediate risk of data compromise or unauthorized access.
Online Time Table Generator versions up to 1.0 is affected by missing authentication for critical function (CVSS 7.5).
Missing authentication on multiple admin action scripts in ProjectWorlds Online Time Table Generator allows unauthenticated users to perform administrative operations. PoC available.
Online Food Ordering System versions up to 1.0 contains a vulnerability that allows attackers to sql injection (CVSS 7.3).
House Rental And Property Listing Project versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 3.5).
House Rental And Property Listing Project versions up to 1.0 is affected by improper access control (CVSS 7.3).
House Rental And Property Listing Project versions up to 1.0 is affected by cross-site scripting (xss) (CVSS 2.4).
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate database queries via the roll_number parameter in /borrow_book.php. Public exploit code is available, though no active exploitation or vendor patch has been confirmed. The EPSS score indicates a very low probability of widespread exploitation at this time.
SQL injection in Projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the admin_id parameter in /view_admin.php. This can result in low-impact data disclosure, tampering, or denial of service against the backend database. While a public exploit exists, the vulnerability is not known to be actively exploited in the wild and has a very low EPSS score.
SQL injection in projectworlds Advanced Library Management System 1.0 allows unauthenticated remote attackers to compromise database integrity, confidentiality, and availability via the book_id parameter in /view_book.php. Public proof-of-concept exploit code exists, but the software's niche deployment footprint and low EPSS exploitation probability (0.05%) suggest limited real-world impact; no active exploitation is confirmed by CISA KEV.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject SQL via the roll_number parameter in /member_search.php. Exploit code is publicly available, but EPSS score is low (0.04%) and no active exploitation has been confirmed by CISA. Attackers may read, modify, or delete database entries depending on database user privileges.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to inject malicious SQL via the book_id parameter in /delete_book.php, potentially resulting in unauthorized data access or modification. No authentication is required, and public exploit code is available, as documented by VulDB and NVD.
SQL injection in projectworlds Advanced Library Management System 1.0 allows remote attackers to manipulate the user_id parameter in /delete_member.php, potentially leading to unauthorized database access or data modification. Exploit code is publicly available, but the EPSS exploitation probability is very low (0.04%), and no active exploitation has been confirmed through CISA KEV.
A security flaw has been discovered in projectworlds can pass malicious payloads up to 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in projectworlds Advanced Library Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Online Admission System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in projectworlds Advanced Library Management System 1.0 exposes the application's database through the unsanitized `keywords` parameter on `/index.php`, exploitable by any unauthenticated remote attacker. The CVSS 4.0 score is 5.5 (Medium), with low-level confidentiality, integrity, and availability impact against the vulnerable system and no scope change to subsequent systems. A public proof-of-concept exploit exists (E:P in the provided vector), though EPSS sits at just 0.03% (9th percentile), consistent with the highly niche deployment footprint of this product; no public exploit identified at time of analysis for widespread campaigns.
Stored cross-site scripting in projectworlds Expense Management System 1.0 allows high-privileged authenticated users to inject malicious scripts via the Expense Categories creation page, affecting other users who view the poisoned content. The vulnerability requires administrator-level access and user interaction (rendering the page), limiting real-world impact despite remote network delivery. Publicly available exploit code exists; EPSS exploitation probability is very low at 0.03%, suggesting this is primarily a proof-of-concept risk rather than an actively exploited threat.
Stored cross-site scripting (XSS) in projectworlds Expense Management System 1.0 allows authenticated users with high privileges to inject malicious scripts via the Currency Page create function (/public/admin/currencies/create), which are then reflected to other users who interact with that page. The vulnerability requires user interaction and high-level administrative privileges to exploit, resulting in limited real-world risk despite public exploit availability and low EPSS score.
Stored cross-site scripting (XSS) in projectworlds Expense Management System 1.0 allows authenticated high-privilege users to inject malicious scripts via the Roles Page create endpoint (/public/admin/roles/create), which are then reflected to other users. The vulnerability requires high-privilege authentication and user interaction to trigger, limiting real-world exploitation despite public POC availability and network accessibility.
Stored cross-site scripting (XSS) in projectworlds Expense Management System 1.0 allows high-privileged authenticated users to inject malicious scripts via the /public/admin/users/create endpoint, which are executed in the browsers of other users viewing the affected page. The vulnerability requires administrator privileges and user interaction (clicking a link), significantly limiting exploitation scope despite remote accessibility and publicly available proof-of-concept code.
Stored cross-site scripting (XSS) in projectworlds Gate Pass Management System 1.0 allows authenticated users to inject malicious scripts via the /add-pass.php endpoint, which execute in the browsers of other users who view the affected content. The vulnerability requires user interaction (UI:P) and authenticated access (PR:L), limiting its scope to reflected or stored XSS within an authenticated session. Publicly available exploit code exists, though EPSS exploitation probability remains very low at 0.03%, suggesting limited real-world weaponization despite public disclosure.
SQL injection in projectworlds Online Shopping System 1.0 exposes database contents to unauthenticated remote attackers via the `keywords` parameter in `/login_submit.php`. The attack requires no credentials, no user interaction, and carries low access complexity, making it trivially scriptable against any exposed instance. Publicly available exploit code exists per a GitHub proof-of-concept, though the EPSS score of 0.03% (9th percentile) reflects the product's limited real-world deployment footprint; no confirmed active exploitation (CISA KEV) has been observed at time of analysis.
We need to produce a JSON object with the specified fields. All fields must be plain text strings, not arrays or objects. We synthesize from the given data: CVE-2025-11604. Given input: CVE ID: CVE-2025-11604 Description: A vulnerability was determined in projectworlds Online Ordering Food System 1.0. This issue affects some unknown processing of the file /all-orders.php. This manipulation of the argument Status causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. CVSS Score: 5.5 CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CWE: CWE-74 EPSS Score: 0.03% (percentile 9%) POC/Exploit: Publicly available Reported by: cna@vuldb.com CPE: cpe:2.3:a:projectworlds:online_food_ordering_system:1.0:*:*:*:*:*:*:* Tags: PHP, SQLi, Online Food Ordering System References: several URLs. KEV status not mentioned. So we assume not in KEV. POC publicly available. So exploitation status: "publicly available exploit code exists". Now, we need to craft the JSON. First field: product_name: "Online Ordering Food System" but must be 1-3 words. It's "Online Food Ordering System" from tags? The CPE product is "online_food_ordering_system". So product name: "Online Food Ordering System". Exactly. summary: Not copy description. Original synthesis. Must start with impact verb and product. Suggested: "SQL injection in Projectworlds Online Food Ordering System 1.0 allows remote attackers to manipulate the Status parameter in /all-orders.php, leading to unauthorized data access or modification." Mention no active exploitation detected, POC exists, low EPSS. "SQL injection in Projectworlds Online Food Ordering System 1.0 allows remote attackers to inject malicious SQL via the Status parameter in /all-orders.php, potentially reading or altering database contents. The vulnerability has a publicly available exploit, but no active exploitation has been confirmed by CISA, and EPSS estimates a low 0.03% probability of exploitation." technical_context: Underlying technology: PHP application, likely using MySQL. The vulnerability is SQL injection (CWE-89, but given CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'). That's a generic injection, but SQLi is specifically CWE-89. However, the CWE provided is CWE-74. We'll mention it. Root cause: improper sanitization of user input in the Status parameter leading to SQL injection. Affected product from CPE: projectworlds online_food_ordering_system version 1.0. The issue is in /all-orders.php. "Projectworlds Online Food Ordering System 1.0 is a PHP-based web application. The vulnerability exists in the /all-orders.php script, where the 'Status' argument is directly incorporated into an SQL query without proper sanitation, falling under CWE-74. This allows injection of arbitrary SQL commands via the affected parameter." risk_assessment: Compare CVSS vector (provided as CVSS:4.0, but we need to translate to 3.1 for analysis? We can interpret: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L ... This is low impact on confidentiality, integrity, availability. So a successful attack yields limited impact. EPSS 0.03% very low. No KEV. POC exists. SSVC: exploitation is "poc" (public proof of concept), not actively exploited; automatable? Probably automatable because it's a simple URL parameter injection, but we need to check CVSS AT:N so automatable. Technical impact: low (limited C/I/A). So it's a low risk, not a priority. CVSS gives base score 5.5 (medium) but real-world risk is minimal. Mention conflicts: none. "CVSS:4.0 vector indicates network attack with low impact on confidentiality, integrity, and availability, resulting in a medium base score (5.5). However, EPSS predicts only a 0.03% chance of exploitation, placing it in the 9th percentile — well below the threshold for active concern. No CISA KEV listing exists. While a public proof-of-concept exploit lowers the barrier to exploitation, the limited technical impact and low prevalence of this niche application keep real-world risk low. The SSVC decision would lean towards 'Track' rather than 'Act', as no active exploitation has been observed and impact is limited." affected_products: "Projectworlds Online Food Ordering System version 1.0 is affected (CPE: cpe:2.3:a:projectworlds:online_food_ordering_system:1.0). No vendor advisory or fix information is available from the references provided; the vulnerability is reported via VulDB (id 327926)." remediation: "No vendor patch is available at this time. As a workaround, implement input validation and parameterized queries for the Status parameter in /all-orders.php to neutralize SQL injection. Additionally, restrict access to the administrative or order management interface to trusted users, and consider web application firewall (WAF) rules to block SQL injection attempts. These mitigations may require code-level changes or external filters, with potential disruption if incorrectly configured." exploit_scenario: "An attacker sends a crafted HTTP request to the /all-orders.php endpoint with a maliciously modified Status parameter, injecting SQL commands. This could extract sensitive data from the application's database or manipulate order statuses. Since a public exploit is available, an unauthenticated remote attacker with network access could easily reproduce the attack." exploitation_conditions: The CVE description says: "This manipulation of the argument Status causes sql injection." No specific authentication or configuration mentioned. CVSS vector is AV:N/PR:N/UI:N, so remote unauthenticated. But we must note that it's a specific file /all-orders.php, likely part of an admin or backend interface. Maybe it requires some access? However, per CVSS PR:N so unauthenticated. We'll state: "The vulnerable script /all-orders.php is accessible without authentication, as indicated by the CVSS vector (PR:N). No special configuration is required for exploitation; the SQL injection is triggered by direct manipulation of the Status parameter in an HTTP request. There are no limiting conditions beyond the availability of the target application online." But if the file requires some prior session? Not indicated. So I'll say: "The vulnerability is exploitable remotely without authentication, as indicated by CVSS vector parameters. No specific user interaction or non-default configuration is necessary; the Status parameter in /all-orders.php is directly injectable." attack_chain: "Send HTTP request with SQLi payload to /all-orders.php?Status=... → Database interprets injected SQL → Extract or modify order data". That's 3 steps. More detailed: "Access /all-orders.php endpoint → Inject malicious SQL into Status parameter → Database executes injected query → Attacker reads or alters data". Use "Access → Inject → Execute → Impact" four steps. I'll go with: "Send crafted request to /all-orders.php → Inject SQL payload via Status parameter → Backend database executes injected query → Sensitive data exfiltration or order manipulation". That's three steps with arrows. The field asks for 3-7 short steps separated by " → ". So I'll do: "Send HTTP request with malicious Status parameter → SQL injection into database query → Unauthorized data access or modification." confidence_notes: "Exploit code publicly available on GitHub (Duo-zhen/CVE/issues/4), confirming reproducibility. No vendor advisory or patch information; affected version confirmed by CPE and VulDB entry. No CISA KEV listing, nor independent verification of active exploitation." Also mention that authentication requirements not explicitly confirmed from description but CVSS says PR:N. prevalence: The product is a niche PHP application from Projectworlds, likely used as a learning or demonstration project, not widely deployed in enterprise. So prevalence is low. "low". Justification: "niche PHP demo system, limited real-world deployments". So "low". prevalence_basis: "projectworlds' demo/tutorial-level application, not enterprise-scale" assessed_cvss_vector: My own CVSS 3.1 vector. Given AV:N, AC:L, PR:N, UI:N, S:U (no scope change), Confidentiality Low (limited read), Integrity Low (modify maybe), Availability Low (maybe no DoS but limited). So: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. That's base score 6.3? Wait actually C:L/I:L/A:L yields score 7.1? Let's compute: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L -> Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. Base score: (N, L, N, N, U) using formula: Impact subscore (ISS) = 1 - (1-C)*(1-I)*(1-A) = 1 - 0.9*0.9*0.9 = 1 - 0.729 = 0.271. Impact = 6.42 * ISS = 6.42 * 0.271 = 1.74. Exploitability = 8.22 * AV:N * AC:L * PR:N * UI:N = 8.22 * 0.85 * 0.77 * 0.85 * 0.85? Wait formula: Exploitability = 8.22 * AttackVector * AttackComplexity * PrivilegesRequired * UserInteraction. For AV:N=0.85, AC:L=0.77, PR:N=0.85, UI:N=0.85 => Exploitability = 8.22 * 0.85 * 0.77 * 0.85 * 0.85 = 8.22 * 0.4727 ≈ 3.886. Base Score = if Impact subscore <=0, 0; else roundup(min(Impact + Exploitability, 10))? Actually if Scope Unchanged, Base Score = roundup(min(Impact + Exploitability, 10)). 1.74 + 3.886 = 5.626, round up 5.7? Wait rounding rules: round up to one decimal: 5.626 -> 5.7. That's medium. But the provided CVSS 4.0 score is 5.5. So 5.7 is close. However, a more accurate assessment: The given CVSS:4.0 has VC:L/VI:L/VA:L, so impacted components vulnerable system confidentiality, integrity, availability all low. That suggests the SQL injection could read some data, modify some data, and cause limited availability impact (maybe denial of service). So C:L/I:L/A:L is appropriate. So I'll use that vector. I'll justify: "Network-accessible, low complexity, no privileges or user interaction; limited impact on all three CIA dimensions." assessed_cvss_rationale: "Network-accessible, no auth or user interaction required; low impact on confidentiality, integrity, and availability." assessed_cvss40_vector: The provided vector is already CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N . I can use that exact vector as my assessment, as it is consistent. But the instruction says "Your OWN independent CVSS 4.0 base vector" – I can reuse the same one if I agree. I'll keep it because it accurately reflects the vulnerability: AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. So I'll output that. assessed_cvss40_vector: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N". Rationale: "Matches the provided vector, reflecting remote unauthenticated access with limited impact on the vulnerable system." Now, put together all fields. All must be strings, no arrays. Let's craft each field accurately. product_name: "Online Food Ordering System" summary:
SQL injection in projectworlds Gate Pass Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the fullname parameter in /add-pass.php. Exploit code is publicly available; no active exploitation has been confirmed (not in CISA KEV). EPSS indicates a very low probability of widespread exploitation (0.03%), likely due to the product's limited deployment.
SQL injection in Advanced Library Management System 1.0 via the user_id parameter in view_member.php allows remote unauthenticated attackers to manipulate database queries, potentially reading, modifying, or deleting data. Exploit code is publicly available, but EPSS indicates very low exploitation likelihood and no active attacks have been reported.
Unrestricted file upload in projectworlds Advanced Library Management System 1.0 allows authenticated remote attackers to upload arbitrary files via the image parameter in /edit_book.php, resulting in low-impact confidentiality, integrity, and availability violations. Public exploit code is available, though EPSS exploitation probability remains very low at 0.05%, suggesting limited real-world attack incentive despite authentication requirement bypass potential.
Stored cross-site scripting in projectworlds Advanced Library Management System 1.0 allows authenticated users with high privileges to inject malicious scripts via the firstname parameter in /edit_admin.php, affecting other users who view admin profiles. Exploitation requires high-privilege authentication and user interaction (UI:P), limiting real-world impact despite network accessibility. Public exploit code exists and EPSS exploitation probability is minimal at 0.03%, suggesting this remains a low-priority vulnerability despite CVE assignment.
A security vulnerability has been detected in Projectworlds Online Tours and Travels 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in Projectworlds Online Shopping System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in Projectworlds Visitor Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A security flaw has been discovered in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Travel Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was identified in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Travel Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Visitor Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was determined in projectworlds Visitor Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Visitor Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, has been found in projectworlds Online Admission System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Admission System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
SQL injection in projectworlds Online Admission System 1.0 exposes the `/adminac.php` endpoint to unauthenticated remote database manipulation via an unsanitized `id` parameter. Any internet-facing deployment of this PHP application allows an attacker to read, modify, or partially disrupt the underlying database without credentials. A public proof-of-concept exploit exists on GitHub, though EPSS exploitation probability sits at just 0.07% (22nd percentile), reflecting the product's extremely narrow deployment footprint rather than reduced exploitability of the flaw itself.
SQL injection in Projectworlds Online Admission System 1.0 allows authenticated remote attackers to manipulate the 'markof' parameter in /admin.php, leading to database queries with limited confidentiality and integrity impact. The vulnerability has publicly available exploit code, though actual exploitation appears limited given the low EPSS score (0.07%) and requirement for authenticated access, suggesting this affects only deployments where admin credentials are already compromised or accessible.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to manipulate the `recipt_no` parameter in `/insertPayment.php`, potentially leading to data breach or system compromise. A public exploit is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), suggesting limited exploitation likelihood.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the client_id or nominee_id parameters in /insertNominee.php. Public exploit code is available, but no active exploitation has been confirmed. EPSS score is low (0.07%), indicating limited exploitation likelihood.
SQL injection in Projectworlds Life Insurance Management System 1.0 enables remote attackers with low privileges to manipulate the client_id parameter in /insertClient.php, leading to unauthorized database access and potential data modification. Public exploit code is available, but EPSS indicates a low probability of widespread exploitation, and no active exploitation has been reported.
SQL injection in Projectworlds Life Insurance Management System 1.0 via the agent_id parameter in /insertagent.php allows authenticated remote attackers to manipulate database queries. Public exploit code is available, but no active exploitation has been confirmed. The vulnerability has low impact (C:L/I:L/A:L) and a very low EPSS score (0.06%), suggesting limited real-world risk.
A vulnerability was found in projectworlds Online Time Table Generator 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Time Table Generator 1.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in projectworlds Online Time Table Generator 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Food Ordering System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability, which was classified as critical, has been found in projectworlds Online Lawyer Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in projectworlds Online Lawyer Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical has been found in projectworlds Student Project Allocation System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Hospital Database Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Examination System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in Project Worlds Student Project Allocation System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical has been found in Projectworlds Online Examination System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0 and classified as critical.php?patientId=1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.