# cve.now: Project Worlds

The newest entries naming Project Worlds as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-4482](https://cve.now/CVE-2025-4482.md): Project Worlds Student Project Allocation System forgot\_password\_sql.php sql injection (CVSS 6.9)
- [CVE-2025-4457](https://cve.now/CVE-2025-4457.md): Project Worlds Car Rental Project approve.php sql injection (CVSS 6.9)
- [CVE-2025-4456](https://cve.now/CVE-2025-4456.md): Project Worlds Car Rental Project signup.php sql injection (CVSS 6.9)
- [CVE-2025-3176](https://cve.now/CVE-2025-3176.md): Project Worlds Online Lawyer Management System single\_lawyer.php sql injection (CVSS 6.9)
- [CVE-2025-3175](https://cve.now/CVE-2025-3175.md): Project Worlds Online Lawyer Management System save\_user\_edit\_profile.php sql injection (CVSS 6.9)
- [CVE-2025-3174](https://cve.now/CVE-2025-3174.md): Project Worlds Online Lawyer Management System searchLawyer.php sql injection (CVSS 6.9)
- [CVE-2025-3173](https://cve.now/CVE-2025-3173.md): Project Worlds Online Lawyer Management System save\_booking.php sql injection (CVSS 6.9)
- [CVE-2025-3172](https://cve.now/CVE-2025-3172.md): Project Worlds Online Lawyer Management System lawyer\_booking.php sql injection (CVSS 6.9)
- [CVE-2025-3171](https://cve.now/CVE-2025-3171.md): Project Worlds Online Lawyer Management System approve\_lawyer.php sql injection (CVSS 6.9)
- [CVE-2025-3170](https://cve.now/CVE-2025-3170.md): Project Worlds Online Lawyer Management System admin\_user.php sql injection (CVSS 6.9)
- [CVE-2025-3042](https://cve.now/CVE-2025-3042.md): Project Worlds Online Time Table Generator updateprofile.php unrestricted upload (CVSS 5.3)
- [CVE-2025-3041](https://cve.now/CVE-2025-3041.md): Project Worlds Online Time Table Generator updatestudent.php unrestricted upload (CVSS 5.3)
- [CVE-2025-3040](https://cve.now/CVE-2025-3040.md): Project Worlds Online Time Table Generator add\_student.php unrestricted upload (CVSS 5.3)
- [CVE-2025-2662](https://cve.now/CVE-2025-2662.md): Project Worlds Online Time Table Generator studentdashboard.php sql injection (CVSS 5.3)
- [CVE-2025-2661](https://cve.now/CVE-2025-2661.md): Project Worlds Online Time Table Generator index.php sql injection (CVSS 6.9)
- [CVE-2025-2660](https://cve.now/CVE-2025-2660.md): Project Worlds Online Time Table Generator index.php sql injection (CVSS 6.9)
- [CVE-2025-2659](https://cve.now/CVE-2025-2659.md): Project Worlds Online Time Table Generator index.php sql injection (CVSS 6.9)
- [CVE-2024-11059](https://cve.now/CVE-2024-11059.md): Project Worlds Free Download Online Shopping System success.php sql injection (CVSS 5.3)
- [CVE-2024-10735](https://cve.now/CVE-2024-10735.md): Project Worlds Life Insurance Management System editNominee.php sql injection (CVSS 5.3)
- [CVE-2024-10734](https://cve.now/CVE-2024-10734.md): Project Worlds Life Insurance Management System editPayment.php sql injection (CVSS 5.3)
- [CVE-2024-10447](https://cve.now/CVE-2024-10447.md): Project Worlds Online Time Table Generator staffdashboard.php sql injection (CVSS 5.3)
- [CVE-2024-10446](https://cve.now/CVE-2024-10446.md): Project Worlds Online Time Table Generator admindashboard.php sql injection (CVSS 5.3)
- [CVE-2024-10433](https://cve.now/CVE-2024-10433.md): Project Worlds Simple Web-Based Chat Application index.php cross site scripting (CVSS 5.3)
- [CVE-2024-10432](https://cve.now/CVE-2024-10432.md): Project Worlds Simple Web-Based Chat Application index.php sql injection (CVSS 6.9)
- [CVE-2024-10425](https://cve.now/CVE-2024-10425.md): Project Worlds Student Project Allocation System Project Selection Page move\_up\_project.php sql injection (CVSS 5.3)
- [CVE-2024-10424](https://cve.now/CVE-2024-10424.md): Project Worlds Student Project Allocation System Project Selection Page remove\_project.php sql injection (CVSS 5.3)
- [CVE-2024-10423](https://cve.now/CVE-2024-10423.md): Project Worlds Student Project Allocation System Project Selection Page project\_selection.php sql injection (CVSS 5.3)
- [CVE-2024-0783](https://cve.now/CVE-2024-0783.md): Project Worlds Online Admission System documents.php unrestricted upload (CVSS 6.3)
- [CVE-2024-0730](https://cve.now/CVE-2024-0730.md): Project Worlds Online Time Table Generator course\_ajax.php sql injection (CVSS 6.3)
- [CVE-2024-0726](https://cve.now/CVE-2024-0726.md): Project Worlds Student Project Allocation System Admin Login Module admin\_login.php cross site scripting (CVSS 4.3)
- [CVE-2024-0650](https://cve.now/CVE-2024-0650.md): Project Worlds Visitor Management System URL dataset.php cross site scripting (CVSS 4.3)
- [CVE-2024-0498](https://cve.now/CVE-2024-0498.md): Project Worlds Lawyer Management System searchLawyer.php sql injection (CVSS 6.3)
- [CVE-2024-0266](https://cve.now/CVE-2024-0266.md): Project Worlds Online Lawyer Management System User Registration cross site scripting (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/project-worlds
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.