Vulnerabilidades em projectworlds

113 resultados
Análise Vexday

Com 97 CVEs catalogadas e nenhuma ainda registrada no catálogo de exploração ativa do CISA KEV, o vendor projectworlds apresenta taxa de exploração abaixo da média geral do catálogo. No entanto, 8 vulnerabilidades possuem prova de conceito (PoC) pública disponível, e esse mesmo número surgiu nos últimos 90 dias, o que indica um ritmo recente de descobertas que merece monitoramento contínuo. A falha mais recorrente é CWE-74 (Improper Neutralization of Special Elements), categoria que abrange injeções de código e comandos — um padrão que tende a facilitar a escalada para explorações mais graves. A CVE mais perigosa atualmente identificada é CVE-2023-3694, com escore EPSS de 0,0066, sinalizando probabilidade ainda baixa de exploração massiva no curto prazo, mas que não deve ser ignorada dado o contexto de PoCs disponíveis.

CVE-2025-9925MEDIUMprojectworlds Travel Management System detail.php sql injectionEPSS 0.4%CVE-2025-11557MEDIUMprojectworlds Gate Pass Management System add-pass.php sql injectionEPSS 0.4%CVE-2025-14570MEDIUMprojectworlds Advanced Library Management System view_admin.php sql injectionEPSS 0.4%CVE-2025-14571MEDIUMprojectworlds Advanced Library Management System borrow_book.php sql injectionEPSS 0.4%CVE-2026-0643MEDIUMprojectworlds House Rental and Property Listing Signup register.php unrestricted uploadEPSS 0.4%CVE-2025-12215MEDIUMprojectworlds Online Shopping System login_submit.php sql injectionEPSS 0.4%CVE-2025-11604MEDIUMprojectworlds Online Ordering Food System all-orders.php sql injectionEPSS 0.4%CVE-2025-14210MEDIUMprojectworlds Advanced Library Management System delete_member.php sql injectionEPSS 0.4%CVE-2025-11475MEDIUMprojectworlds Advanced Library Management System view_member.php sql injectionEPSS 0.4%CVE-2025-14211MEDIUMprojectworlds Advanced Library Management System delete_book.php sql injectionEPSS 0.4%CVE-2025-13255MEDIUMprojectworlds Advanced Library Management System book_search.php sql injectionEPSS 0.4%CVE-2025-14212MEDIUMprojectworlds Advanced Library Management System member_search.php sql injectionEPSS 0.4%CVE-2026-3759MEDIUMprojectworlds Online Art Gallery Shop adminHome.php sql injectionEPSS 0.4%CVE-2024-12950MEDIUMcode-projects/projectworlds Travel Management System subcat.php sql injectionEPSS 0.4%CVE-2025-8247MEDIUMProjectworlds Online Admission System admin.php sql injectionEPSS 0.4%CVE-2025-12862MEDIUMprojectworlds Online Notes Sharing Platform userprofile.php unrestricted uploadEPSS 0.4%CVE-2025-11103MEDIUMProjectworlds Online Tours and Travels change-image.php unrestricted uploadEPSS 0.4%CVE-2026-3758MEDIUMprojectworlds Online Art Gallery Shop adminHome.php sql injectionEPSS 0.4%CVE-2026-2136MEDIUMprojectworlds Online Food Ordering System view-ticket.php sql injectionEPSS 0.4%CVE-2025-14527MEDIUMprojectworlds Advanced Library Management System view_book.php sql injectionEPSS 0.4%