CVE-2026-86238projectworlds Online Examination System Feedback Form feedback.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product O Online Examination System Published 09/07/2026 Severity Medium CVE-2026-10875projectworlds Online Art Gallery Shop Project adminHome.ph sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Art Gallery Shop Project Published 06/04/2026 Severity Medium CVE-2026-10874projectworlds Online Art Gallery Shop Project adminHome.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Art Gallery Shop Project Published 06/04/2026 Severity Medium CVE-2026-9364projectworlds Online Art Gallery Shop adminHome.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Art Gallery Shop Published 05/24/2026 Severity Medium CVE-2026-8785projectworlds hospital-management-system-in-php GET Parameter update_info.php getAllPatientDetail sql injection Exploitation status Public exploit Fix Not confirmed Affected product H hospital-management-system-in-php Published 05/18/2026 Severity Medium CVE-2026-5645projectworlds Car Rental System Parameter pay.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Car Rental System Published 04/06/2026 Severity Medium CVE-2026-5637projectworlds Car Rental System Parameter message_admin.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Car Rental System Published 04/06/2026 Severity Medium CVE-2026-5634projectworlds Car Rental Project Parameter book_car.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Car Rental Project Published 04/06/2026 Severity Medium CVE-2026-5368projectworlds Car Rental Project Parameter login.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Car Rental Project Published 04/02/2026 Severity Medium CVE-2026-4626projectworlds Lawyer Management System lawyer_booking.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product L Lawyer Management System Published 03/24/2026 Severity Medium CVE-2026-4596projectworlds Lawyer Management System lawyers.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product L Lawyer Management System Published 03/23/2026 Severity Medium CVE-2026-4540projectworlds Online Notes Sharing System Parameters login.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Notes Sharing System Published 03/22/2026 Severity Medium CVE-2026-3759projectworlds Online Art Gallery Shop adminHome.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Art Gallery Shop Published 03/08/2026 Severity Medium CVE-2026-3758projectworlds Online Art Gallery Shop adminHome.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Art Gallery Shop Published 03/08/2026 Severity Medium CVE-2026-3757projectworlds Online Art Gallery Shop pass sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Art Gallery Shop Published 03/08/2026 Severity Medium CVE-2026-3406projectworlds Online Art Gallery Shop Registration registration.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Art Gallery Shop Published 03/02/2026 Severity Medium CVE-2025-70146Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 02/18/2026 Severity Critical CVE-2025-70147Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 02/18/2026 Severity High CVE-2026-2136projectworlds Online Food Ordering System view-ticket.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Food Ordering System Published 02/08/2026 Severity Medium CVE-2026-1700projectworlds House Rental and Property Listing sms.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product H House Rental and Property Listing Published 01/30/2026 Severity Medium CVE-2026-0643projectworlds House Rental and Property Listing Signup register.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product H House Rental and Property Listing Published 01/06/2026 Severity Medium CVE-2026-0642projectworlds House Rental and Property Listing complaint.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product H House Rental and Property Listing Published 01/06/2026 Severity Medium CVE-2025-14571projectworlds Advanced Library Management System borrow_book.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 12/12/2025 Severity Medium CVE-2025-14570projectworlds Advanced Library Management System view_admin.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 12/12/2025 Severity Medium CVE-2025-14527projectworlds Advanced Library Management System view_book.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 12/11/2025 Severity Medium CVE-2025-14212projectworlds Advanced Library Management System member_search.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 12/08/2025 Severity Medium CVE-2025-14211projectworlds Advanced Library Management System delete_book.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 12/08/2025 Severity Medium CVE-2025-14210projectworlds Advanced Library Management System delete_member.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 12/08/2025 Severity Medium CVE-2025-13573projectworlds can pass malicious payloads add_book.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product C can pass malicious payloads Published 11/23/2025 Severity Medium CVE-2025-13572projectworlds Advanced Library Management System delete_admin.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 11/23/2025 Severity Medium CVE-2025-13278projectworlds Advanced Library Management System borrowed_book_search.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 11/17/2025 Severity Medium CVE-2025-13256projectworlds Advanced Library Management System borrow.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 11/17/2025 Severity Medium CVE-2025-13255projectworlds Advanced Library Management System book_search.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 11/17/2025 Severity Medium CVE-2025-13254projectworlds Advanced Library Management System add_member.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 11/17/2025 Severity Medium CVE-2025-13253projectworlds Advanced Library Management System add_librarian.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 11/16/2025 Severity Medium CVE-2025-12938projectworlds Online Admission System process_login.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Admission System Published 11/10/2025 Severity Medium CVE-2025-12862projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product O Online Notes Sharing Platform Published 11/07/2025 Severity Medium CVE-2025-12237projectworlds Advanced Library Management System index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 10/27/2025 Severity Medium CVE-2025-12231projectworlds Expense Management System Expense Categories create cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product E Expense Management System Published 10/27/2025 Severity Medium CVE-2025-12230projectworlds Expense Management System Currency create cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product E Expense Management System Published 10/27/2025 Severity Medium CVE-2025-12229projectworlds Expense Management System Roles Page create cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product E Expense Management System Published 10/27/2025 Severity Medium CVE-2025-12228projectworlds Expense Management System Users Page create cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product E Expense Management System Published 10/27/2025 Severity Medium CVE-2025-12227projectworlds Gate Pass Management System add-pass.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product G Gate Pass Management System Published 10/27/2025 Severity Medium CVE-2025-12215projectworlds Online Shopping System login_submit.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Shopping System Published 10/27/2025 Severity Medium CVE-2025-11604projectworlds Online Ordering Food System all-orders.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Ordering Food System Published 10/11/2025 Severity Medium CVE-2025-11557projectworlds Gate Pass Management System add-pass.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product G Gate Pass Management System Published 10/09/2025 Severity Medium CVE-2025-11475projectworlds Advanced Library Management System view_member.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 10/08/2025 Severity Medium CVE-2025-11426projectworlds Advanced Library Management System edit_book.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 10/08/2025 Severity Medium CVE-2025-11425projectworlds Advanced Library Management System edit_admin.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product A Advanced Library Management System Published 10/08/2025 Severity Medium CVE-2025-60311Exploitation status Public exploit Fix Not confirmed Affected product Not confirmed Published 10/08/2025 Severity High CVE-2025-11103Projectworlds Online Tours and Travels change-image.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product O Online Tours and Travels Published 09/28/2025 Severity Medium CVE-2025-11070Projectworlds Online Shopping System cart_add.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Shopping System Published 09/27/2025 Severity Medium CVE-2025-11067Projectworlds Visitor Management System Add Visitor myform.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product V Visitor Management System Published 09/27/2025 Severity Medium CVE-2025-9928projectworlds Travel Management System viewcategory.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 09/03/2025 Severity Medium CVE-2025-9927projectworlds Travel Management System viewpackage.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 09/03/2025 Severity Medium CVE-2025-9926projectworlds Travel Management System viewsubcategory.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 09/03/2025 Severity Medium CVE-2025-9925projectworlds Travel Management System detail.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 09/03/2025 Severity Medium CVE-2025-9924projectworlds Travel Management System enquiry.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 09/03/2025 Severity Medium CVE-2025-9053projectworlds Travel Management System updatesubcategory.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 08/15/2025 Severity Medium CVE-2025-9052projectworlds Travel Management System updatepackage.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 08/15/2025 Severity Medium CVE-2025-9051projectworlds Travel Management System updatecategory.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 08/15/2025 Severity Medium CVE-2025-9050projectworlds Travel Management System addcategory.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product T Travel Management System Published 08/15/2025 Severity Medium CVE-2025-9047projectworlds Visitor Management System visitor_out.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product V Visitor Management System Published 08/15/2025 Severity Medium CVE-2025-8948projectworlds Visitor Management System front.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product V Visitor Management System Published 08/14/2025 Severity Medium CVE-2025-8947projectworlds Visitor Management System query_data.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product V Visitor Management System Published 08/14/2025 Severity Medium CVE-2025-8946projectworlds Online Notes Sharing Platform login.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Notes Sharing Platform Published 08/14/2025 Severity Medium CVE-2025-8496projectworlds Online Admission System viewform.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Admission System Published 08/03/2025 Severity Medium CVE-2025-8471projectworlds Online Admission System adminlogin.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Admission System Published 08/02/2025 Severity Medium CVE-2025-8436projectworlds Online Admission System viewdoc.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Admission System Published 08/01/2025 Severity Medium CVE-2025-8338projectworlds Online Admission System adminac.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Admission System Published 07/30/2025 Severity Medium CVE-2025-8247Projectworlds Online Admission System admin.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Admission System Published 07/27/2025 Severity Medium CVE-2025-6136Projectworlds Life Insurance Management System insertPayment.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Life Insurance Management System Published 06/16/2025 Severity Medium CVE-2025-6135Projectworlds Life Insurance Management System insertNominee.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Life Insurance Management System Published 06/16/2025 Severity Medium CVE-2025-6134Projectworlds Life Insurance Management System insertClient.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Life Insurance Management System Published 06/16/2025 Severity Medium CVE-2025-6133Projectworlds Life Insurance Management System insertagent.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Life Insurance Management System Published 06/16/2025 Severity Medium CVE-2025-5213projectworlds Responsive E-Learning System delete_file.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product R Responsive E-Learning System Published 05/26/2025 Severity Medium CVE-2025-5008projectworlds Online Time Table Generator add_teacher.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Time Table Generator Published 05/20/2025 Severity Medium CVE-2025-5004projectworlds Online Time Table Generator add_course.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Time Table Generator Published 05/20/2025 Severity Medium CVE-2025-5003projectworlds Online Time Table Generator semester_ajax.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Time Table Generator Published 05/20/2025 Severity Medium CVE-2025-4936projectworlds Online Food Ordering System admin-page.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Food Ordering System Published 05/19/2025 Severity Medium CVE-2025-4932projectworlds Online Lawyer Management System lawyer_registation.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Lawyer Management System Published 05/19/2025 Severity Medium CVE-2025-4931projectworlds Online Lawyer Management System user_registation.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Lawyer Management System Published 05/19/2025 Severity Medium CVE-2025-4928projectworlds Online Lawyer Management System save_lawyer_edit_profile.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Lawyer Management System Published 05/19/2025 Severity Medium CVE-2025-4837projectworlds Student Project Allocation System make_group_sql.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Project Allocation System Published 05/17/2025 Severity Medium CVE-2025-4836Projectworlds Life Insurance Management System deleteAgent.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product L Life Insurance Management System Published 05/17/2025 Severity Medium CVE-2025-4739projectworlds Hospital Database Management System medicines_info.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product H Hospital Database Management System Published 05/16/2025 Severity Medium CVE-2025-4706projectworlds Online Examination System Procedure3b_yearwiseVisit.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Examination System Published 05/15/2025 Severity Medium CVE-2025-4482Project Worlds Student Project Allocation System forgot_password_sql.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Student Project Allocation System Published 05/09/2025 Severity Medium CVE-2025-4457Project Worlds Car Rental Project approve.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Car Rental Project Published 05/09/2025 Severity Medium CVE-2025-4456Project Worlds Car Rental Project signup.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Car Rental Project Published 05/09/2025 Severity Medium CVE-2025-4058Projectworlds Online Examination System Bloodgroop_process.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Examination System Published 04/29/2025 Severity Medium CVE-2025-4034projectworlds Online Examination System inser_doc_process.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Examination System Published 04/28/2025 Severity Medium CVE-2025-3186projectworlds Online Doctor Appointment Booking System invoice.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium CVE-2025-3185projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium CVE-2025-3184projectworlds Online Doctor Appointment Booking System profile.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium CVE-2025-3183projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium CVE-2025-3182projectworlds Online Doctor Appointment Booking System getschedule.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium CVE-2025-3181projectworlds Online Doctor Appointment Booking System appointment.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium CVE-2025-3180projectworlds Online Doctor Appointment Booking System deleteschedule.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium CVE-2025-3179projectworlds Online Doctor Appointment Booking System deletepatient.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Doctor Appointment Booking System Published 04/03/2025 Severity Medium