# cve.now: Projectworlds The newest entries naming Projectworlds as an affected vendor (up to 200), of 113 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-114266](https://cve.now/CVE-2026-114266.md): ProjectWorlds Advanced Library Management System profile.php mysqli\_query sql injection (CVSS 5.3) - [CVE-2026-114265](https://cve.now/CVE-2026-114265.md): ProjectWorlds Advanced Library Management System Search Form returned\_book\_search.php mysqli\_query sql injection (CVSS 5.3) - [CVE-2026-114264](https://cve.now/CVE-2026-114264.md): ProjectWorlds Advanced Library Management System edit\_member.php sql injection (CVSS 5.1) - [CVE-2026-114263](https://cve.now/CVE-2026-114263.md): ProjectWorlds Advanced Library Management System individual\_report\_search.php mysqli\_query sql injection (CVSS 6.9) - [CVE-2026-114039](https://cve.now/CVE-2026-114039.md): projectworlds Advanced Library Management System report\_search.php mysqli\_query sql injection (CVSS 5.3) - [CVE-2026-86238](https://cve.now/CVE-2026-86238.md): projectworlds Online Examination System Feedback Form feedback.php cross site scripting (CVSS 5.3) - [CVE-2026-10875](https://cve.now/CVE-2026-10875.md): projectworlds Online Art Gallery Shop Project adminHome.ph sql injection (CVSS 5.3) - [CVE-2026-10874](https://cve.now/CVE-2026-10874.md): projectworlds Online Art Gallery Shop Project adminHome.php sql injection (CVSS 5.3) - [CVE-2026-9364](https://cve.now/CVE-2026-9364.md): projectworlds Online Art Gallery Shop adminHome.php sql injection (CVSS 6.9) - [CVE-2026-8785](https://cve.now/CVE-2026-8785.md): projectworlds hospital-management-system-in-php GET Parameter update\_info.php getAllPatientDetail sql injection (CVSS 6.9) - [CVE-2026-5645](https://cve.now/CVE-2026-5645.md): projectworlds Car Rental System Parameter pay.php sql injection (CVSS 6.9) - [CVE-2026-5637](https://cve.now/CVE-2026-5637.md): projectworlds Car Rental System Parameter message\_admin.php sql injection (CVSS 6.9) - [CVE-2026-5634](https://cve.now/CVE-2026-5634.md): projectworlds Car Rental Project Parameter book\_car.php sql injection (CVSS 6.9) - [CVE-2026-5368](https://cve.now/CVE-2026-5368.md): projectworlds Car Rental Project Parameter login.php sql injection (CVSS 6.9) - [CVE-2026-4626](https://cve.now/CVE-2026-4626.md): projectworlds Lawyer Management System lawyer\_booking.php cross site scripting (CVSS 5.1) - [CVE-2026-4596](https://cve.now/CVE-2026-4596.md): projectworlds Lawyer Management System lawyers.php cross site scripting (CVSS 5.1) - [CVE-2026-4540](https://cve.now/CVE-2026-4540.md): projectworlds Online Notes Sharing System Parameters login.php sql injection (CVSS 6.9) - [CVE-2026-3759](https://cve.now/CVE-2026-3759.md): projectworlds Online Art Gallery Shop adminHome.php sql injection (CVSS 6.9) - [CVE-2026-3758](https://cve.now/CVE-2026-3758.md): projectworlds Online Art Gallery Shop adminHome.php sql injection (CVSS 6.9) - [CVE-2026-3757](https://cve.now/CVE-2026-3757.md): projectworlds Online Art Gallery Shop pass sql injection (CVSS 6.9) - [CVE-2026-3406](https://cve.now/CVE-2026-3406.md): projectworlds Online Art Gallery Shop Registration registration.php sql injection (CVSS 6.9) - [CVE-2026-2136](https://cve.now/CVE-2026-2136.md): projectworlds Online Food Ordering System view-ticket.php sql injection (CVSS 6.9) - [CVE-2026-1700](https://cve.now/CVE-2026-1700.md): projectworlds House Rental and Property Listing sms.php cross site scripting (CVSS 5.1) - [CVE-2026-0643](https://cve.now/CVE-2026-0643.md): projectworlds House Rental and Property Listing Signup register.php unrestricted upload (CVSS 6.9) - [CVE-2026-0642](https://cve.now/CVE-2026-0642.md): projectworlds House Rental and Property Listing complaint.php cross site scripting (CVSS 4.8) - [CVE-2025-14571](https://cve.now/CVE-2025-14571.md): projectworlds Advanced Library Management System borrow\_book.php sql injection (CVSS 6.9) - [CVE-2025-14570](https://cve.now/CVE-2025-14570.md): projectworlds Advanced Library Management System view\_admin.php sql injection (CVSS 6.9) - [CVE-2025-14527](https://cve.now/CVE-2025-14527.md): projectworlds Advanced Library Management System view\_book.php sql injection (CVSS 6.9) - [CVE-2025-14212](https://cve.now/CVE-2025-14212.md): projectworlds Advanced Library Management System member\_search.php sql injection (CVSS 6.9) - [CVE-2025-14211](https://cve.now/CVE-2025-14211.md): projectworlds Advanced Library Management System delete\_book.php sql injection (CVSS 6.9) - [CVE-2025-14210](https://cve.now/CVE-2025-14210.md): projectworlds Advanced Library Management System delete\_member.php sql injection (CVSS 6.9) - [CVE-2025-13573](https://cve.now/CVE-2025-13573.md): projectworlds can pass malicious payloads add\_book.php unrestricted upload (CVSS 5.3) - [CVE-2025-13572](https://cve.now/CVE-2025-13572.md): projectworlds Advanced Library Management System delete\_admin.php sql injection (CVSS 6.9) - [CVE-2025-13278](https://cve.now/CVE-2025-13278.md): projectworlds Advanced Library Management System borrowed\_book\_search.php sql injection (CVSS 5.3) - [CVE-2025-13256](https://cve.now/CVE-2025-13256.md): projectworlds Advanced Library Management System borrow.php sql injection (CVSS 5.3) - [CVE-2025-13255](https://cve.now/CVE-2025-13255.md): projectworlds Advanced Library Management System book\_search.php sql injection (CVSS 5.3) - [CVE-2025-13254](https://cve.now/CVE-2025-13254.md): projectworlds Advanced Library Management System add\_member.php sql injection (CVSS 5.3) - [CVE-2025-13253](https://cve.now/CVE-2025-13253.md): projectworlds Advanced Library Management System add\_librarian.php sql injection (CVSS 5.3) - [CVE-2025-12938](https://cve.now/CVE-2025-12938.md): projectworlds Online Admission System process\_login.php sql injection (CVSS 6.9) - [CVE-2025-12862](https://cve.now/CVE-2025-12862.md): projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload (CVSS 5.3) - [CVE-2025-12237](https://cve.now/CVE-2025-12237.md): projectworlds Advanced Library Management System index.php sql injection (CVSS 6.9) - [CVE-2025-12231](https://cve.now/CVE-2025-12231.md): projectworlds Expense Management System Expense Categories create cross site scripting (CVSS 4.8) - [CVE-2025-12230](https://cve.now/CVE-2025-12230.md): projectworlds Expense Management System Currency create cross site scripting (CVSS 4.8) - [CVE-2025-12229](https://cve.now/CVE-2025-12229.md): projectworlds Expense Management System Roles Page create cross site scripting (CVSS 4.8) - [CVE-2025-12228](https://cve.now/CVE-2025-12228.md): projectworlds Expense Management System Users Page create cross site scripting (CVSS 4.8) - [CVE-2025-12227](https://cve.now/CVE-2025-12227.md): projectworlds Gate Pass Management System add-pass.php cross site scripting (CVSS 5.1) - [CVE-2025-12215](https://cve.now/CVE-2025-12215.md): projectworlds Online Shopping System login\_submit.php sql injection (CVSS 6.9) - [CVE-2025-11604](https://cve.now/CVE-2025-11604.md): projectworlds Online Ordering Food System all-orders.php sql injection (CVSS 6.9) - [CVE-2025-11557](https://cve.now/CVE-2025-11557.md): projectworlds Gate Pass Management System add-pass.php sql injection (CVSS 6.9) - [CVE-2025-11475](https://cve.now/CVE-2025-11475.md): projectworlds Advanced Library Management System view\_member.php sql injection (CVSS 6.9) - [CVE-2025-11426](https://cve.now/CVE-2025-11426.md): projectworlds Advanced Library Management System edit\_book.php unrestricted upload (CVSS 5.3) - [CVE-2025-11425](https://cve.now/CVE-2025-11425.md): projectworlds Advanced Library Management System edit\_admin.php cross site scripting (CVSS 4.8) - [CVE-2025-11103](https://cve.now/CVE-2025-11103.md): Projectworlds Online Tours and Travels change-image.php unrestricted upload (CVSS 5.1) - [CVE-2025-11070](https://cve.now/CVE-2025-11070.md): Projectworlds Online Shopping System cart\_add.php sql injection (CVSS 6.9) - [CVE-2025-11067](https://cve.now/CVE-2025-11067.md): Projectworlds Visitor Management System Add Visitor myform.php cross site scripting (CVSS 4.8) - [CVE-2025-9928](https://cve.now/CVE-2025-9928.md): projectworlds Travel Management System viewcategory.php sql injection (CVSS 6.9) - [CVE-2025-9927](https://cve.now/CVE-2025-9927.md): projectworlds Travel Management System viewpackage.php sql injection (CVSS 6.9) - [CVE-2025-9926](https://cve.now/CVE-2025-9926.md): projectworlds Travel Management System viewsubcategory.php sql injection (CVSS 6.9) - [CVE-2025-9925](https://cve.now/CVE-2025-9925.md): projectworlds Travel Management System detail.php sql injection (CVSS 6.9) - [CVE-2025-9924](https://cve.now/CVE-2025-9924.md): projectworlds Travel Management System enquiry.php sql injection (CVSS 6.9) - [CVE-2025-9053](https://cve.now/CVE-2025-9053.md): projectworlds Travel Management System updatesubcategory.php sql injection (CVSS 6.9) - [CVE-2025-9052](https://cve.now/CVE-2025-9052.md): projectworlds Travel Management System updatepackage.php sql injection (CVSS 6.9) - [CVE-2025-9051](https://cve.now/CVE-2025-9051.md): projectworlds Travel Management System updatecategory.php sql injection (CVSS 6.9) - [CVE-2025-9050](https://cve.now/CVE-2025-9050.md): projectworlds Travel Management System addcategory.php sql injection (CVSS 6.9) - [CVE-2025-9047](https://cve.now/CVE-2025-9047.md): projectworlds Visitor Management System visitor\_out.php sql injection (CVSS 6.9) - [CVE-2025-8948](https://cve.now/CVE-2025-8948.md): projectworlds Visitor Management System front.php sql injection (CVSS 6.9) - [CVE-2025-8947](https://cve.now/CVE-2025-8947.md): projectworlds Visitor Management System query\_data.php sql injection (CVSS 6.9) - [CVE-2025-8946](https://cve.now/CVE-2025-8946.md): projectworlds Online Notes Sharing Platform login.php sql injection (CVSS 6.9) - [CVE-2025-8496](https://cve.now/CVE-2025-8496.md): projectworlds Online Admission System viewform.php sql injection (CVSS 6.9) - [CVE-2025-8471](https://cve.now/CVE-2025-8471.md): projectworlds Online Admission System adminlogin.php sql injection (CVSS 6.9) - [CVE-2025-8436](https://cve.now/CVE-2025-8436.md): projectworlds Online Admission System viewdoc.php sql injection (CVSS 6.9) - [CVE-2025-8338](https://cve.now/CVE-2025-8338.md): projectworlds Online Admission System adminac.php sql injection (CVSS 6.9) - [CVE-2025-8247](https://cve.now/CVE-2025-8247.md): Projectworlds Online Admission System admin.php sql injection (CVSS 5.3) - [CVE-2025-6136](https://cve.now/CVE-2025-6136.md): Projectworlds Life Insurance Management System insertPayment.php sql injection (CVSS 5.3) - [CVE-2025-6135](https://cve.now/CVE-2025-6135.md): Projectworlds Life Insurance Management System insertNominee.php sql injection (CVSS 5.3) - [CVE-2025-6134](https://cve.now/CVE-2025-6134.md): Projectworlds Life Insurance Management System insertClient.php sql injection (CVSS 5.3) - [CVE-2025-6133](https://cve.now/CVE-2025-6133.md): Projectworlds Life Insurance Management System insertagent.php sql injection (CVSS 5.3) - [CVE-2025-5213](https://cve.now/CVE-2025-5213.md): projectworlds Responsive E-Learning System delete\_file.php sql injection (CVSS 6.9) - [CVE-2025-5008](https://cve.now/CVE-2025-5008.md): projectworlds Online Time Table Generator add\_teacher.php sql injection (CVSS 6.9) - [CVE-2025-5004](https://cve.now/CVE-2025-5004.md): projectworlds Online Time Table Generator add\_course.php sql injection (CVSS 6.9) - [CVE-2025-5003](https://cve.now/CVE-2025-5003.md): projectworlds Online Time Table Generator semester\_ajax.php sql injection (CVSS 6.9) - [CVE-2025-4936](https://cve.now/CVE-2025-4936.md): projectworlds Online Food Ordering System admin-page.php sql injection (CVSS 6.9) - [CVE-2025-4932](https://cve.now/CVE-2025-4932.md): projectworlds Online Lawyer Management System lawyer\_registation.php sql injection (CVSS 6.9) - [CVE-2025-4931](https://cve.now/CVE-2025-4931.md): projectworlds Online Lawyer Management System user\_registation.php sql injection (CVSS 6.9) - [CVE-2025-4928](https://cve.now/CVE-2025-4928.md): projectworlds Online Lawyer Management System save\_lawyer\_edit\_profile.php sql injection (CVSS 6.9) - [CVE-2025-4837](https://cve.now/CVE-2025-4837.md): projectworlds Student Project Allocation System make\_group\_sql.php sql injection (CVSS 6.9) - [CVE-2025-4836](https://cve.now/CVE-2025-4836.md): Projectworlds Life Insurance Management System deleteAgent.php sql injection (CVSS 6.9) - [CVE-2025-4739](https://cve.now/CVE-2025-4739.md): projectworlds Hospital Database Management System medicines\_info.php sql injection (CVSS 6.9) - [CVE-2025-4706](https://cve.now/CVE-2025-4706.md): projectworlds Online Examination System Procedure3b\_yearwiseVisit.php sql injection (CVSS 6.9) - [CVE-2025-4058](https://cve.now/CVE-2025-4058.md): Projectworlds Online Examination System Bloodgroop\_process.php sql injection (CVSS 6.9) - [CVE-2025-4034](https://cve.now/CVE-2025-4034.md): projectworlds Online Examination System inser\_doc\_process.php sql injection (CVSS 6.9) - [CVE-2025-3186](https://cve.now/CVE-2025-3186.md): projectworlds Online Doctor Appointment Booking System invoice.php sql injection (CVSS 6.9) - [CVE-2025-3185](https://cve.now/CVE-2025-3185.md): projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection (CVSS 6.9) - [CVE-2025-3184](https://cve.now/CVE-2025-3184.md): projectworlds Online Doctor Appointment Booking System profile.php sql injection (CVSS 6.9) - [CVE-2025-3183](https://cve.now/CVE-2025-3183.md): projectworlds Online Doctor Appointment Booking System patientupdateprofile.php sql injection (CVSS 6.9) - [CVE-2025-3182](https://cve.now/CVE-2025-3182.md): projectworlds Online Doctor Appointment Booking System getschedule.php sql injection (CVSS 6.9) - [CVE-2025-3181](https://cve.now/CVE-2025-3181.md): projectworlds Online Doctor Appointment Booking System appointment.php sql injection (CVSS 6.9) - [CVE-2025-3180](https://cve.now/CVE-2025-3180.md): projectworlds Online Doctor Appointment Booking System deleteschedule.php sql injection (CVSS 6.9) - [CVE-2025-3179](https://cve.now/CVE-2025-3179.md): projectworlds Online Doctor Appointment Booking System deletepatient.php sql injection (CVSS 6.9) - [CVE-2025-3178](https://cve.now/CVE-2025-3178.md): projectworlds Online Doctor Appointment Booking System deleteappointment.php sql injection (CVSS 6.9) - [CVE-2025-2657](https://cve.now/CVE-2025-2657.md): projectworlds Apartment Visitors Management System front.php sql injection (CVSS 6.9) - [CVE-2025-2067](https://cve.now/CVE-2025-2067.md): projectworlds Life Insurance Management System search.php sql injection (CVSS 6.9) - [CVE-2025-2066](https://cve.now/CVE-2025-2066.md): projectworlds Life Insurance Management System updateAgent.php sql injection (CVSS 6.9) - [CVE-2025-2065](https://cve.now/CVE-2025-2065.md): projectworlds Life Insurance Management System editAgent.php sql injection (CVSS 6.9) - [CVE-2025-2064](https://cve.now/CVE-2025-2064.md): projectworlds Life Insurance Management System deletePayment.php sql injection (CVSS 6.9) - [CVE-2025-2063](https://cve.now/CVE-2025-2063.md): projectworlds Life Insurance Management System deleteNominee.php sql injection (CVSS 6.9) - [CVE-2025-2062](https://cve.now/CVE-2025-2062.md): projectworlds Life Insurance Management System clientStatus.php sql injection (CVSS 6.9) - [CVE-2025-1965](https://cve.now/CVE-2025-1965.md): projectworlds Online Hotel Booking login.php sql injection (CVSS 6.9) - [CVE-2025-1964](https://cve.now/CVE-2025-1964.md): projectworlds Online Hotel Booking booknow.php sql injection (CVSS 6.9) - [CVE-2025-1963](https://cve.now/CVE-2025-1963.md): projectworlds Online Hotel Booking reservation.php sql injection (CVSS 6.9) - [CVE-2025-1962](https://cve.now/CVE-2025-1962.md): projectworlds Online Hotel Booking addroom.php sql injection (CVSS 6.9) - [CVE-2024-12950](https://cve.now/CVE-2024-12950.md): code-projects/projectworlds Travel Management System subcat.php sql injection (CVSS 5.3) - [CVE-2023-3694](https://cve.now/CVE-2023-3694.md): SourceCodester/projectworlds House Rental and Property Listing index.php sql injection (CVSS 5.3) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/projectworlds Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.