Description Summary:
A SQL injection vulnerability exists in the projectworlds Hospital Management System in PHP version 1.0, allowing unauthenticated attackers to manipulate database queries.

Executive Summary:
A critical SQL injection vulnerability in the projectworlds Hospital Management System allows unauthenticated attackers to potentially access or modify sensitive database information.

Vulnerability Details

CVE-ID: CVE-2026-8785

Affected Software: projectworlds hospital-management-system-in-php

Affected Versions: 1.0

Vulnerability: This is an SQL injection vulnerability (CWE-89) that allows an unauthenticated attacker to inject malicious SQL commands into the system, bypassing intended application logic.

Business Impact

With a CVSS score of 7.3, this flaw poses a severe risk to data confidentiality and integrity. If exploited, an attacker could extract sensitive patient data, modify medical records, or gain unauthorized access to the underlying database, leading to significant reputational and regulatory consequences.

Remediation Plan

Immediate Action: Disable the application until a secure version or code fix is implemented, as no official patch is currently available.

Proactive Monitoring: Monitor database query logs for unusual patterns, such as unexpected SQL syntax errors or attempts to access administrative tables.

Compensating Controls: Implement a Web Application Firewall (WAF) with robust SQL injection protection rules to filter malicious input.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of May 18, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. SQL injection remains a highly reliable attack vector against unpatched legacy PHP applications.

Analyst Recommendation

Given the nature of the software (Hospital Management System), the risk of PHI (Protected Health Information) exposure is extreme. Organizations should immediately restrict access to this application or migrate to a more secure, maintained solution.

Description Summary:
A SQL injection vulnerability in the pay.php file of Projectworlds Car Rental System 1.0 allows unauthenticated remote attackers to manipulate the mpesa parameter to execute arbitrary SQL queries.

Executive Summary:
An unauthenticated SQL injection vulnerability in Projectworlds Car Rental System 1.0 poses a critical risk of unauthorized database access and potential full system compromise.

Vulnerability Details

CVE-ID: CVE-2026-5645

Affected Software: Projectworlds Car Rental System

Affected Versions: 1.0

Vulnerability: The application fails to properly sanitize the mpesa parameter within the pay.php script before incorporating it into database queries. This flaw allows an unauthenticated remote attacker to inject malicious SQL commands, enabling unauthorized data exfiltration or modification.

Business Impact

Successful exploitation of this vulnerability allows an attacker to bypass authentication, access sensitive customer information, and potentially modify or delete database records. Given the CVSS score of 7.3, this represents a significant risk to data integrity and confidentiality, which could lead to severe reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: As no official patch is currently available from the vendor, administrators should restrict access to the pay.php endpoint via network controls or disable the component entirely if it is not business-critical.

Proactive Monitoring: Review web server access logs for anomalous POST requests to pay.php containing SQL syntax characters, such as single quotes, dashes, or SQL keywords like UNION and SLEEP.

Compensating Controls: Deploy a Web Application Firewall (WAF) with custom rules designed to detect and block SQL injection patterns specifically targeting the mpesa parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the GitHub repository referenced in the vulnerability record.

Analyst Notes: As of April 6, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible as it requires no prior authentication to trigger.

Analyst Recommendation

Given the availability of public exploit material, this vulnerability should be treated with high urgency. Organizations utilizing Projectworlds Car Rental System 1.0 must prioritize the implementation of compensating controls, such as WAF filtering, until a formal security update is released by the vendor to address the underlying code flaw.

Description Summary:
Projectworlds Car Rental System 1.0 contains a SQL injection vulnerability in the message_admin.php file via the message parameter, allowing unauthenticated remote code execution.

Executive Summary:
An unauthenticated SQL injection vulnerability in Projectworlds Car Rental System 1.0 allows remote attackers to compromise the underlying database and potentially gain full system control.

Vulnerability Details

CVE-ID: CVE-2026-5637

Affected Software: Projectworlds Car Rental System

Affected Versions: 1.0

Vulnerability: This flaw is a SQL injection vulnerability (CWE-89) located in the /message_admin.php file. Attackers can exploit this by injecting malicious SQL commands into the message parameter without requiring any authentication.

Business Impact

The exploitation of this vulnerability poses a severe risk to business operations, as it permits unauthorized access to sensitive database contents, data tampering, and potential service disruption. With a CVSS score of 7.3, this high-severity flaw threatens the confidentiality and integrity of the entire application environment, potentially leading to total system compromise.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict network access to the /message_admin.php endpoint or disable the affected functionality entirely.

Proactive Monitoring: Review database access logs for unusual query patterns, such as the use of sleep functions or unexpected character sequences in the message parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting the application.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the referenced GitHub security issue.

Analyst Notes: As of April 6, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible to attackers due to the lack of required authentication.

Analyst Recommendation

Given the availability of public proof-of-concept code and the lack of a vendor-provided patch, users of Projectworlds Car Rental System 1.0 must treat this as a critical exposure. Immediate steps should be taken to isolate the vulnerable application from external networks to prevent unauthorized database access while awaiting a permanent security update.

Description Summary:
A SQL injection vulnerability exists in the book_car.php file of Projectworlds Car Rental System 1.0, allowing unauthenticated attackers to manipulate the fname parameter.

Executive Summary:
An unauthenticated SQL injection vulnerability in Projectworlds Car Rental System 1.0 allows remote attackers to compromise database integrity and access sensitive information.

Vulnerability Details

CVE-ID: CVE-2026-5634

Affected Software: Projectworlds Car Rental System

Affected Versions: 1.0

Vulnerability: The application fails to properly sanitize user input provided via the fname parameter in the /book_car.php file. This flaw allows an unauthenticated remote attacker to inject malicious SQL queries, enabling unauthorized database interaction.

Business Impact

Successful exploitation of this vulnerability permits unauthorized access to the underlying database, which may lead to the exfiltration of sensitive user information, data tampering, or complete system compromise. Given the CVSS score of 7.3, this represents a significant risk to data confidentiality and integrity, potentially resulting in severe operational disruption or regulatory non-compliance.

Remediation Plan

Immediate Action: As no official vendor patch is currently available, administrators should restrict access to the /book_car.php endpoint via network controls or disable the affected functionality entirely until a secure version is released.

Proactive Monitoring: Security teams should review web server access logs for anomalous POST requests to /book_car.php, specifically searching for SQL syntax characters or time-based payloads like SLEEP statements.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns targeting the fname parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the research write-up on GitHub.

Analyst Notes: As of April 6, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible as it requires no authentication to execute.

Analyst Recommendation

Due to the lack of an official patch and the public availability of exploit details, this vulnerability poses a clear and present danger to affected environments. Organizations currently utilizing Projectworlds Car Rental System 1.0 must prioritize the implementation of compensating controls or isolate the application from external networks to prevent unauthorized database access.

Description Summary:
A vulnerability has been identified in Projectworlds Car Rental Project 1.0, potentially allowing for unauthorized data access or system manipulation.

Executive Summary:
The Car Rental Project 1.0 by Projectworlds contains a security vulnerability that could be exploited to compromise the application and its associated data.

Vulnerability Details

CVE-ID: CVE-2026-5368

Affected Software: Car Rental Project

Affected Versions: Version 1.0

Vulnerability: A vulnerability exists in the Car Rental Project 1.0 software. While specific details are not provided, such vulnerabilities in management projects often include SQL injection or broken authentication, which could be exploited by an unauthenticated or low-privileged attacker.

Business Impact

Exploitation of this flaw could lead to the unauthorized disclosure of customer information, rental records, and financial data. It could also allow an attacker to disrupt business operations by modifying or deleting critical database entries. The CVSS score of 7.3 highlights the High severity and the potential for significant reputational and operational damage.

Remediation Plan

Immediate Action: Users of this project should check for available patches or consider migrating to a more secure and actively maintained car rental management solution.

Proactive Monitoring: Monitor database query logs for suspicious patterns, such as unexpected SQL syntax or attempts to access sensitive tables.

Compensating Controls: Deploy the application behind a Web Application Firewall (WAF) to help mitigate common web-based attack vectors.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of April 4, 2026, there is no public information indicating active exploitation of this vulnerability. Small-scale or open-source projects often lack consistent security auditing, making them prime targets for automated scanners.

Analyst Recommendation

Because this project may not receive regular security updates, administrators should evaluate the necessity of this software. If it must be used, ensure it is heavily firewalled and that all inputs are strictly validated to prevent common web exploits.

Description Summary:
The login.php file in Projectworlds Online Notes Sharing System 1.0 is vulnerable to SQL injection via the user parameter, allowing unauthenticated remote attackers to execute arbitrary database queries.

Executive Summary:
Projectworlds Online Notes Sharing System 1.0 contains a critical SQL injection vulnerability that allows unauthenticated remote attackers to compromise the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-4540

Affected Software: Projectworlds Online Notes Sharing System

Affected Versions: 1.0

Vulnerability: This flaw is a SQL injection (CWE-89) located in the login.php script. An unauthenticated attacker can supply a malicious payload through the user parameter to manipulate backend SQL queries, bypassing authentication or extracting sensitive information.

Business Impact

The ability for an unauthenticated attacker to manipulate database queries poses a severe risk to data confidentiality, integrity, and availability. Successful exploitation could lead to unauthorized access to all stored notes, credential theft, or complete system compromise. Given the CVSS score of 7.3, this represents a high-severity risk that requires immediate attention to prevent unauthorized data exposure.

Remediation Plan

Immediate Action: As no official vendor patch is available, immediately restrict network access to the login page or take the application offline until the code is remediated. Developers should implement prepared statements with parameter binding to sanitize all user inputs before processing.

Proactive Monitoring: Review web server and database logs for anomalous activity, specifically looking for SQL syntax errors or unexpected characters in the user parameter of POST requests to login.php.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the user parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists and is documented in the researcher's technical write-up on GitHub.

Analyst Notes: As of March 23, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly exploitable due to the lack of required authentication.

Analyst Recommendation

The presence of a public proof-of-concept significantly lowers the barrier for exploitation by malicious actors. Organizations currently running Projectworlds Online Notes Sharing System 1.0 should treat this as a high-priority issue. If the application cannot be patched using prepared statements, it must be isolated from the public internet to prevent unauthorized database access.

Description Summary:
A SQL injection vulnerability in the Online Art Gallery Shop 1.0 adminHome.php file allows unauthenticated attackers to execute arbitrary database queries via the reach_nm parameter.

Executive Summary:
An unauthenticated SQL injection vulnerability in projectworlds Online Art Gallery Shop 1.0 poses a critical risk of full database compromise.

Vulnerability Details

CVE-ID: CVE-2026-3759

Affected Software: projectworlds Online Art Gallery Shop

Affected Versions: 1.0

Vulnerability: The application fails to properly sanitize user input in the reach_nm parameter within the /admin/adminHome.php file before using it in SQL queries. This flaw permits unauthenticated attackers to inject malicious SQL commands, leading to unauthorized database access or manipulation.

Business Impact

Successful exploitation allows an attacker to bypass authentication, extract sensitive data, modify database records, or potentially achieve full system control. Given the CVSS score of 7.3 and the nature of SQL injection, this vulnerability represents a significant risk to data integrity, confidentiality, and overall business continuity.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict network access to the /admin/ directory to trusted internal IP addresses only. If the application is not business-critical, disable the service until the vendor provides a formal security update.

Proactive Monitoring: Monitor database query logs for suspicious patterns, such as unexpected use of SQL keywords or syntax errors, particularly originating from the reach_nm parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns, specifically targeting the reach_nm parameter in POST requests.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as detailed in the GitHub issue referenced in the CVE record.

Analyst Notes: As of March 10, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly exploitable due to the lack of required authentication.

Analyst Recommendation

Due to the lack of a vendor-provided patch and the availability of public proof-of-concept code, this vulnerability presents an immediate risk. Organizations utilizing this software must implement strict network-level access controls and WAF filtering to prevent unauthorized database access. Prioritize migrating away from this legacy software if the vendor does not provide timely security updates.

Description Summary:
A weakness has been identified in projectworlds Online Art Gallery Shop 1 that could allow attackers to compromise the online storefront and its data.

Executive Summary:
The projectworlds Online Art Gallery Shop 1 is vulnerable to a high-severity security flaw that threatens the security of customer transactions and personal information.

Vulnerability Details

CVE-ID: CVE-2026-3758

Affected Software: projectworlds Online Art Gallery Shop

Affected Versions: 1

Vulnerability: A security weakness exists in version 1 of the Online Art Gallery Shop. This flaw likely involves an insecure handling of web requests, which could allow an attacker to perform unauthorized actions or access sensitive database contents.

Business Impact

The exploitation of this vulnerability could lead to the exposure of customer PII and transaction details. With a CVSS score of 7.3, the risk to the business includes financial loss due to fraudulent activity and long-term damage to the brand's reputation among art collectors and artists.

Remediation Plan

Immediate Action: Update the Online Art Gallery Shop software to the most recent version available from projectworlds to resolve the identified weakness.

Proactive Monitoring: Monitor e-commerce transaction logs for anomalies and review web server error logs for patterns indicating automated vulnerability scanning.

Compensating Controls: Deploy an egress filtering policy to prevent the exfiltration of data in the event of a successful application compromise.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 9, 2026, there is no public information indicating active exploitation of this vulnerability. Despite this, the high severity of the flaw suggests that it could be targeted by opportunistic attackers.

Analyst Recommendation

The security of the Online Art Gallery Shop is paramount for maintaining customer trust. It is highly recommended that the primary remediation step—applying the vendor's security update—be completed immediately to protect against potential exploitation.

Description Summary:
A SQL injection vulnerability in the projectworlds Online Art Gallery Shop 1.0 allows unauthenticated remote attackers to manipulate database queries via the fnm parameter.

Executive Summary:
A critical SQL injection vulnerability in the projectworlds Online Art Gallery Shop allows unauthenticated attackers to potentially compromise database integrity and access sensitive data.

Vulnerability Details

CVE-ID: CVE-2026-3757

Affected Software: projectworlds Online Art Gallery Shop

Affected Versions: 1.0

Vulnerability: The application fails to properly sanitize user input in the fnm parameter within the /?pass=1 file. This SQL injection flaw allows an unauthenticated remote attacker to inject malicious SQL commands, leading to unauthorized database operations.

Business Impact

Successful exploitation of this vulnerability can result in the full disclosure of sensitive database contents, unauthorized data modification, or total loss of data integrity. Given the CVSS score of 7.3, this represents a high-risk scenario where an attacker can gain significant control over the backend database without requiring any authentication, potentially leading to service disruption and severe reputational damage.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected file or disable the vulnerable functionality entirely until a vendor-supplied update is released.

Proactive Monitoring: Monitor server access logs for anomalous POST requests directed at the /?pass=1 endpoint, specifically looking for SQL syntax patterns or unexpected character strings in the fnm parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets configured to detect and block common SQL injection payloads targeted at the application.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the referenced GitHub issue.

Analyst Notes: As of March 10, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly exploitable due to the lack of required authentication and the direct usage of unsanitized input in backend queries.

Analyst Recommendation

The presence of a publicly available proof-of-concept significantly increases the risk of exploitation by automated scanners and malicious actors. Organizations running this software must prioritize the implementation of compensating controls, such as WAF filtering, and actively seek a secure alternative or vendor-provided fix to remediate the underlying code flaw.

Description Summary:
A vulnerability in projectworlds Online Art Gallery Shop version 1 could allow attackers to compromise the e-commerce platform's security.

Executive Summary:
The Online Art Gallery Shop software contains a high-severity vulnerability that puts customer data and transaction security at risk.

Vulnerability Details

CVE-ID: CVE-2026-3406

Affected Software: projectworlds Online Art Gallery Shop

Affected Versions: Version 1

Vulnerability: A vulnerability was found in the Online Art Gallery Shop application. In e-commerce contexts, such flaws typically involve Cross-Site Scripting (XSS), SQL injection, or insecure direct object references.

Business Impact

A successful exploit could lead to the theft of customer information, unauthorized access to the shop's management backend, or the manipulation of order data. The CVSS score of 7.3 indicates a High severity, which could result in financial loss and damage to the brand's reputation.

Remediation Plan

Immediate Action: Apply the latest security patches for the Online Art Gallery Shop or migrate to a supported, secure version of the software.

Proactive Monitoring: Monitor transaction logs for fraudulent activity and review web server logs for suspicious injection attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) to protect the shop from common web exploits and ensure all payment processing is handled by secure, third-party providers.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of March 2, 2026, there is no public information indicating active exploitation of this vulnerability. Small e-commerce platforms are often targeted due to perceived lower security maturity.

Analyst Recommendation

We recommend that administrators of the Online Art Gallery Shop apply security updates immediately. Protecting customer data is paramount to maintaining business operations and consumer trust.

Description Summary:
The Online Food Ordering System 1.0 contains a SQL injection vulnerability in the view-ticket.php file, allowing unauthenticated remote attackers to manipulate the ID argument.

Executive Summary:
A critical SQL injection vulnerability exists in projectworlds Online Food Ordering System 1.0 that enables unauthenticated remote attackers to compromise database integrity.

Vulnerability Details

CVE-ID: CVE-2026-2136

Affected Software: projectworlds Online Food Ordering System

Affected Versions: 1.0

Vulnerability: The application is susceptible to SQL injection via the ID parameter in the view-ticket.php file, which allows unauthenticated attackers to execute arbitrary SQL queries against the backend database.

Business Impact

Successful exploitation of this vulnerability allows unauthorized access to sensitive database information, potentially leading to data exfiltration or system compromise. With a CVSS score of 7.3, this flaw is categorized as High severity, posing a significant risk to the confidentiality and integrity of the application environment.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the vulnerable view-ticket.php endpoint or disable the affected module until a vendor-supplied update is released.

Proactive Monitoring: Review database query logs for suspicious patterns, such as unexpected SQL syntax or unauthorized access attempts directed at the view-ticket.php script.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block incoming requests containing SQL injection payloads targeting the ID parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the referenced GitHub issue.

Analyst Notes: As of February 9, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible due to the unauthenticated nature of the attack vector.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability presents an immediate threat to any organization running the affected version of the Online Food Ordering System. Organizations must prioritize the implementation of compensating controls and maintain strict network perimeter security until a vendor-authorized patch is available for deployment.

Description Summary:
Projectworlds House Rental and Property Listing 1.0 contains an unrestricted file upload vulnerability in the Signup component, allowing remote attackers to upload arbitrary files.

Executive Summary:
A critical unrestricted file upload vulnerability in the Projectworlds House Rental and Property Listing application enables remote code execution potential due to insufficient file validation.

Vulnerability Details

CVE-ID: CVE-2026-0643

Affected Software: Projectworlds House Rental and Property Listing

Affected Versions: 1.0

Vulnerability: This vulnerability occurs within the /app/register.php file of the Signup component, where improper access controls and file validation permit unauthenticated users to upload arbitrary files.

Business Impact

The ability for an unauthenticated remote attacker to upload files to the server creates a severe risk of arbitrary code execution, which could lead to a full system compromise. With a CVSS score of 7.3, this high-severity flaw poses a significant threat to data confidentiality and integrity, potentially allowing attackers to gain persistent access to the underlying server infrastructure.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the registration endpoint or disable the registration functionality entirely until a secure update is provided.

Proactive Monitoring: Security teams should monitor web server logs for suspicious file upload requests, particularly those targeting the /app/register.php endpoint, and audit the web root for unauthorized files.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block file uploads that do not conform to expected file types, sizes, or extensions.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the linked GitHub repository.

Analyst Notes: As of January 9, 2026, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently dangerous because it allows direct manipulation of the file system via the registration process.

Analyst Recommendation

Given the availability of a public proof-of-concept and the high risk associated with unrestricted file uploads, this vulnerability requires immediate attention. Organizations utilizing the affected software must treat this as a priority, implementing strict access controls or disabling the vulnerable component until the vendor releases a formal security patch.

Description Summary:
A SQL injection vulnerability in projectworlds Travel Management System 1.0 allows remote attackers to manipulate the t1 argument in the viewcategory.php file to execute unauthorized database queries.

Executive Summary:
A critical SQL injection vulnerability in projectworlds Travel Management System 1.0 permits unauthenticated remote attackers to compromise database integrity.

Vulnerability Details

CVE-ID: CVE-2025-9928

Affected Software: projectworlds Travel Management System

Affected Versions: 1.0

Vulnerability: This is a SQL injection flaw (CWE-89) located in the viewcategory.php file, specifically affecting the t1 input parameter. The vulnerability allows an unauthenticated remote attacker to inject malicious SQL commands into the backend database.

Business Impact

The ability for an unauthenticated attacker to perform SQL injection poses a significant risk to data confidentiality and integrity. Successful exploitation could lead to unauthorized access to sensitive travel records, potential data exfiltration, or modification of application data. With a CVSS score of 7.3, this high-severity vulnerability necessitates immediate attention to prevent unauthorized database interactions that could disrupt business operations or compromise user information.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict network access to the application or disable the vulnerable viewcategory.php script if it is not business critical.

Proactive Monitoring: Monitor database query logs for unusual syntax or patterns indicative of SQL injection attempts, such as the use of UNION, SELECT, or comment characters in the t1 parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns targeting the t1 argument in the application URI path.

Exploitation Status

Public Exploit Available: Yes — a published proof-of-concept exists, as documented in the technical write-up at the referenced GitHub repository.

Analyst Notes: As of September 4, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently easy to exploit due to the lack of input sanitization on the affected parameter.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of remote execution, this vulnerability represents a significant risk to the environment. IT teams should prioritize the implementation of compensating controls, such as WAF filtering, while maintaining a strict watch for vendor updates. Immediate containment is required until a formal patch is released by the vendor to remediate the underlying injection flaw.

Description Summary:
ProjectWorlds Travel Management System 1.0 contains a SQL injection vulnerability in the viewpackage.php file, allowing remote attackers to manipulate the t1 argument.

Executive Summary:
A critical SQL injection vulnerability in ProjectWorlds Travel Management System 1.0 exposes the application to unauthorized database manipulation by unauthenticated remote attackers.

Vulnerability Details

CVE-ID: CVE-2025-9927

Affected Software: ProjectWorlds Travel Management System

Affected Versions: 1.0

Vulnerability: The application is susceptible to SQL injection (CWE-89) within the viewpackage.php script. An unauthenticated remote attacker can inject malicious SQL commands via the t1 parameter, which is processed without proper sanitization.

Business Impact

The ability to perform SQL injection allows an attacker to bypass authentication, access sensitive data, or potentially modify the underlying database contents. Given the CVSS score of 7.3, this represents a high-severity risk that could lead to significant data breaches or unauthorized administrative actions. Organizations relying on this system face potential operational disruption and loss of data integrity.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict network access to the affected web directory or disable the vulnerable viewpackage.php component entirely.

Proactive Monitoring: Inspect web server logs for suspicious URL patterns containing SQL syntax or unusual query strings targeting the viewpackage.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting input parameters.

Exploitation Status

Public Exploit Available: Yes — a published proof-of-concept exists via the GitHub repository linked in the vulnerability references.

Analyst Notes: As of September 4, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous due to the lack of required authentication for the vulnerable endpoint.

Analyst Recommendation

Due to the availability of a public proof-of-concept and the lack of a vendor-supplied patch, this vulnerability poses an immediate threat to the environment. Security teams must prioritize isolating the affected component and implementing robust WAF filtering to prevent exploitation until a formal update is released by the vendor.

Description Summary:
A SQL injection vulnerability in projectworlds Travel Management System 1.0 allows remote attackers to manipulate the t1 argument in the viewsubcategory.php file to compromise the database.

Executive Summary:
The Travel Management System 1.0 is affected by a critical SQL injection vulnerability that enables remote, unauthenticated attackers to manipulate database queries.

Vulnerability Details

CVE-ID: CVE-2025-9926

Affected Software: projectworlds Travel Management System

Affected Versions: 1.0

Vulnerability: This is a SQL injection vulnerability (CWE-89) affecting the viewsubcategory.php file, specifically within the t1 argument. The vulnerability is remotely exploitable without requiring authentication (AV:N/AC:L/PR:N/UI:N).

Business Impact

The ability for an unauthenticated user to inject arbitrary SQL commands poses a severe risk to data confidentiality and integrity. With a CVSS score of 7.3, this flaw could allow attackers to extract sensitive information, modify records, or bypass authentication mechanisms within the application. Such an incident could result in significant data breaches and a loss of trust from system users.

Remediation Plan

Immediate Action: As no official patch is currently identified, administrators should restrict access to the affected script, viewsubcategory.php, or isolate the application from public networks until a vendor-supplied update is available.

Proactive Monitoring: Review web server access logs for suspicious patterns, such as SQL keywords or unusual characters within URL parameters directed at the viewsubcategory.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads targeting the application, providing a virtual patch until the underlying code is remediated.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists via the technical write-up provided in the referenced GitHub issue.

Analyst Notes: As of September 4, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is highly accessible as it requires no authentication to trigger the vulnerable function.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability requires immediate attention. Organizations currently running version 1.0 of the projectworlds Travel Management System must implement strict network access controls and WAF protections immediately. Continuous monitoring for unauthorized database activity is essential until a formal security update can be applied.

Description Summary:
Travel Management System 1.0 is vulnerable to remote SQL injection via the pid argument in detail.php, allowing unauthenticated attackers to manipulate database queries.

Executive Summary:
Projectworlds Travel Management System version 1.0 is affected by a critical SQL injection vulnerability that allows unauthenticated remote attackers to compromise database integrity.

Vulnerability Details

CVE-ID: CVE-2025-9925

Affected Software: Projectworlds Travel Management System

Affected Versions: 1.0

Vulnerability: This is a SQL injection vulnerability (CWE-89) located in the detail.php script. An unauthenticated attacker can supply malicious input to the pid parameter to execute arbitrary SQL commands against the backend database.

Business Impact

The ability for an unauthenticated user to inject SQL queries poses a severe risk to data confidentiality and integrity. Successful exploitation could lead to unauthorized access to sensitive travel records, user credentials, or administrative data, potentially resulting in full system compromise. Given the CVSS score of 7.3, this represents a high-risk security flaw that requires immediate attention to prevent data exfiltration.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected detail.php endpoint or disable the vulnerable component entirely until a vendor-supplied update is released.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax or unusual characters directed at the detail.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the pid parameter.

Exploitation Status

Public Exploit Available: Yes — a public proof-of-concept exists as documented in the GitHub issue referenced in the vulnerability record.

Analyst Notes: As of September 4, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The presence of a published proof-of-concept increases the likelihood of opportunistic attacks against exposed instances.

Analyst Recommendation

Due to the ease of exploitation and the availability of public proof-of-concept code, this vulnerability presents an elevated risk to all deployments of Travel Management System 1.0. Organizations must prioritize immediate mitigation by restricting network access to the application or implementing strict WAF filtering. We strongly recommend continuous monitoring for signs of unauthorized database interaction until a vendor-provided security update is applied.

Description Summary:
A SQL injection vulnerability in projectworlds Travel Management System 1.0 allows remote attackers to manipulate the t2 argument in enquiry.php to execute unauthorized database queries.

Executive Summary:
A critical SQL injection vulnerability in projectworlds Travel Management System 1.0 exposes the application to remote, unauthenticated data manipulation.

Vulnerability Details

CVE-ID: CVE-2025-9924

Affected Software: projectworlds Travel Management System

Affected Versions: 1.0

Vulnerability: The vulnerability is a SQL injection flaw (CWE-89) residing in the enquiry.php file. An unauthenticated remote attacker can inject malicious SQL commands via the t2 parameter, bypassing typical security controls to interact directly with the backend database.

Business Impact

The ability for an unauthenticated attacker to perform SQL injection poses a significant risk to data confidentiality and integrity. Successful exploitation could lead to unauthorized access to sensitive traveler information, potential database content modification, or total compromise of the application data layer. Given the CVSS score of 7.3, this flaw represents a high risk that requires prompt attention to prevent unauthorized data exposure.

Remediation Plan

Immediate Action: Since no official vendor patch is currently available, administrators should restrict access to the Travel Management System by placing it behind a secure VPN or firewall, or disable the application until a security update is released by the developer.

Proactive Monitoring: Review web application access logs for unusual patterns or characters in the enquiry.php request parameters, specifically monitoring the t2 field for SQL syntax such as single quotes, dashes, or SQL keywords.

Compensating Controls: Deploy a Web Application Firewall (WAF) with specific rulesets designed to detect and block common SQL injection payloads targeting the application.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the research submission at https://github.com/JunGu-W/cve/issues/7.

Analyst Notes: As of September 4, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible to attackers as it does not require authentication or user interaction.

Analyst Recommendation

This vulnerability presents a clear and present danger due to the availability of public proof-of-concept code and the lack of authentication requirements for exploitation. Organizations currently running version 1.0 of the projectworlds Travel Management System must prioritize restricting external access to the application immediately. Until a formal patch is issued, assume the application is vulnerable to automated scanning and exploitation attempts.

Description Summary:
Projectworlds Visitor Management System 1.0 suffers from an unauthenticated SQL injection vulnerability in the front.php file via the rid parameter.

Executive Summary:
An unauthenticated SQL injection vulnerability in the projectworlds Visitor Management System 1.0 allows remote attackers to execute malicious database queries.

Vulnerability Details

CVE-ID: CVE-2025-8948

Affected Software: projectworlds Visitor Management System

Affected Versions: 1.0

Vulnerability: This is an SQL injection flaw (CWE-89) triggered by the improper sanitization of the rid argument within the front.php file. The vulnerability is exploitable by unauthenticated remote attackers.

Business Impact

The ability to perform unauthenticated SQL injection poses a significant risk to the integrity and confidentiality of the underlying database. Depending on database permissions, an attacker could extract sensitive visitor information, modify records, or potentially gain further access to the host environment, justifying the 7.3 CVSS score.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict access to the affected system or take the application offline until a secure version is released.

Proactive Monitoring: Monitor server access logs for anomalous HTTP requests targeting front.php, specifically looking for SQL syntax patterns or unexpected characters in the rid parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block SQL injection attempts and malicious query strings directed at the application.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the referenced GitHub issue.

Analyst Notes: As of August 15, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible due to the unauthenticated nature of the attack vector.

Analyst Recommendation

Due to the availability of a public proof-of-concept and the ease of exploitation, this vulnerability presents an elevated risk to deployments of the projectworlds Visitor Management System. Organizations must prioritize restricting network access to the affected interface and remain vigilant for vendor updates to resolve this flaw permanently.

Description Summary:
Projectworlds Visitor Management System 1.0 is vulnerable to remote SQL injection via the dateF and dateP parameters in the query_data.php file, allowing unauthorized database interaction.

Executive Summary:
A remote SQL injection vulnerability in projectworlds Visitor Management System 1.0 poses a significant risk of unauthorized database manipulation by unauthenticated attackers.

Vulnerability Details

CVE-ID: CVE-2025-8947

Affected Software: projectworlds Visitor Management System

Affected Versions: 1.0

Vulnerability: The application fails to properly sanitize input provided to the dateF and dateP arguments within the query_data.php script, resulting in a SQL injection vulnerability that is exploitable by unauthenticated remote attackers.

Business Impact

Successful exploitation of this SQL injection vulnerability could allow an attacker to read, modify, or delete sensitive data stored in the application database. Given the CVSS score of 7.3, this is a high-severity issue that could lead to unauthorized information disclosure or total compromise of the visitor management records, resulting in significant operational and privacy impacts.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict network access to the affected script or disable the functionality until a vendor update is released.

Proactive Monitoring: Monitor web server access logs for anomalous requests to query_data.php containing SQL syntax characters, such as single quotes or comment indicators.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block incoming requests containing malicious SQL payloads targeting the dateF and dateP parameters.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the research write-up at the referenced GitHub repository.

Analyst Notes: As of August 15, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous due to its accessibility via unauthenticated remote requests.

Analyst Recommendation

The presence of a public proof-of-concept and the ease of exploitation via remote, unauthenticated requests make this a critical issue for organizations currently running this software. Administrators must prioritize isolating the vulnerable component from external access until a security update is provided by the vendor, as the ability to inject arbitrary SQL queries directly threatens the integrity of the application data.

Description Summary:
A SQL injection vulnerability in the Online Notes Sharing Platform 1.0 login.php file allows unauthenticated remote attackers to manipulate the User parameter.

Executive Summary:
An unauthenticated SQL injection vulnerability exists in the projectworlds Online Notes Sharing Platform 1.0, posing a significant risk of data exposure or unauthorized access.

Vulnerability Details

CVE-ID: CVE-2025-8946

Affected Software: projectworlds Online Notes Sharing Platform

Affected Versions: 1.0

Vulnerability: This flaw is a SQL injection vulnerability (CWE-89) triggered via the User parameter in the login.php script. The vulnerability is remotely exploitable by an unauthenticated attacker, as indicated by the CVSS vector AV:N/PR:N.

Business Impact

The presence of a SQL injection vulnerability allows an attacker to interact directly with the application backend database. This risk includes the unauthorized disclosure of sensitive user notes or credentials, potential modification of application data, and overall compromise of the integrity of the platform. Given the CVSS score of 7.3, this is a high severity issue that requires immediate attention to prevent data breaches and maintain system availability.

Remediation Plan

Immediate Action: Since a specific patch is not currently available, administrators should restrict network access to the login.php interface or disable the application until a security update is released by the vendor.

Proactive Monitoring: Security teams should review web server access logs for anomalous SQL syntax patterns, such as UNION, SELECT, or comment characters, directed toward the login.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting the application login forms.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the research write-up at the provided GitHub reference.

Analyst Notes: As of August 15, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous due to the ease of remote execution against an unauthenticated endpoint.

Analyst Recommendation

Organizations currently running projectworlds Online Notes Sharing Platform 1.0 must treat this vulnerability with high priority. Because the exploit is public and the attack vector is unauthenticated, the risk of automated scanning and exploitation is elevated. Please implement the recommended compensating controls immediately and monitor the vendor's site for an official security patch to address the underlying code flaw.

Description Summary:
A SQL injection vulnerability in the Online Admission System 1.0 file viewform.php allows remote attackers to manipulate the ID argument to execute unauthorized database queries.

Executive Summary:
The projectworlds Online Admission System 1.0 contains a critical SQL injection vulnerability that allows unauthenticated remote attackers to manipulate database queries.

Vulnerability Details

CVE-ID: CVE-2025-8496

Affected Software: projectworlds Online Admission System

Affected Versions: 1.0

Vulnerability: The vulnerability is a SQL injection (CWE-89) occurring within the viewform.php file. It allows an unauthenticated remote attacker to inject malicious SQL commands via the ID parameter.

Business Impact

The ability to perform SQL injection poses a significant risk to the integrity and confidentiality of the underlying database. Successful exploitation could lead to unauthorized data access, modification of student or system records, and potential disruption of administrative services. Given the CVSS score of 7.3, this represents a high-severity risk that demands prompt attention to prevent unauthorized access to sensitive institutional data.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected web application or take the service offline until a secure version is released.

Proactive Monitoring: Review web server and application logs for suspicious patterns in URL parameters, specifically looking for common SQL injection syntax such as union, select, or comment characters originating from untrusted IP addresses.

Compensating Controls: Implement a Web Application Firewall (WAF) with strict SQL injection protection rules to inspect and block malicious input targeted at the ID parameter in viewform.php.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the research write-up at https://github.com/huangtinlin/CVE/issues/1.

Analyst Notes: As of August 4, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous because it requires no authentication to execute, making it highly accessible to automated scanning tools.

Analyst Recommendation

Due to the availability of a public proof-of-concept and the ease of exploitation, this vulnerability poses a credible threat to any deployment of the Online Admission System. Organizations should prioritize isolating the affected system from public networks immediately. Until the vendor provides a formal security update, the application should be considered insecure for production use.

Description Summary:
A SQL injection vulnerability exists in projectworlds Online Admission System 1.0, specifically within the a_id argument of the adminlogin.php file, allowing for remote exploitation.

Executive Summary:
A critical SQL injection vulnerability in the projectworlds Online Admission System 1.0 allows for unauthenticated remote exploitation, posing a significant risk of unauthorized database access.

Vulnerability Details

CVE-ID: CVE-2025-8471

Affected Software: projectworlds Online Admission System

Affected Versions: 1.0

Vulnerability: The application is susceptible to a SQL injection vulnerability (CWE-89) triggered via the a_id parameter in the adminlogin.php file. The vulnerability is exploitable by an unauthenticated remote attacker.

Business Impact

Successful exploitation of this SQL injection vulnerability could allow an attacker to bypass authentication, extract sensitive information, or potentially modify database contents. Given the CVSS score of 7.3, this represents a high-severity risk to the confidentiality and integrity of the institutional data managed by the admission system. Such a breach could lead to severe reputational damage and the compromise of personal applicant records.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the adminlogin.php endpoint at the network or web server level until a vendor-supplied update is released.

Proactive Monitoring: Review web server access logs for suspicious requests targeting adminlogin.php, specifically monitoring for unusual characters or SQL syntax patterns in the a_id parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns to mitigate potential exploitation attempts.

Exploitation Status

Public Exploit Available: Yes, a public exploit exists as evidenced by its presence in ExploitDB and a corresponding GitHub proof-of-concept repository.

Analyst Notes: As of August 4, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently exploitable because it allows direct manipulation of database queries without authentication.

Analyst Recommendation

The presence of a public exploit significantly elevates the risk profile for this vulnerability. Organizations using projectworlds Online Admission System 1.0 must prioritize implementing the suggested compensating controls immediately to prevent unauthorized access. Monitor vendor channels closely for the release of a security patch and apply it as soon as it becomes available.

Description Summary:
A SQL injection vulnerability in the Online Admission System 1.0 allows remote attackers to manipulate the ID argument in the viewdoc.php file.

Executive Summary:
A critical SQL injection vulnerability exists in the Projectworlds Online Admission System 1.0, which may allow unauthenticated remote attackers to compromise the database.

Vulnerability Details

CVE-ID: CVE-2025-8436

Affected Software: Projectworlds Online Admission System

Affected Versions: 1.0

Vulnerability: The vulnerability is a SQL injection flaw (CWE-89) located in the viewdoc.php file. An unauthenticated remote attacker can inject malicious SQL commands by manipulating the ID parameter, potentially leading to unauthorized data access or manipulation.

Business Impact

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive student or institutional data stored within the system database. Given the CVSS score of 7.3, this represents a high-severity risk that could result in significant data breaches and potential loss of system integrity.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the vulnerable viewdoc.php file or take the application offline until a secure version is released.

Proactive Monitoring: Monitor database query logs for suspicious patterns or unexpected syntax that may indicate automated SQL injection attempts against the application.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets to detect and block malicious SQL injection payloads targeting the ID parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the research write-up at https://github.com/Sunhaobin318/CVE/issues/2.

Analyst Notes: As of August 1, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is easily triggered remotely due to the lack of input sanitization in the affected script.

Analyst Recommendation

The presence of a public proof-of-concept combined with the unauthenticated nature of this attack makes CVE-2025-8436 a significant risk to the availability and confidentiality of the Online Admission System. Organizations must prioritize restricting access to the affected endpoint immediately and maintain vigilant monitoring until an official vendor update is provided.

Description Summary:
ProjectWorlds Online Admission System 1.0 contains a SQL injection vulnerability in the adminac.php file, allowing remote attackers to manipulate the ID argument.

Executive Summary:
A critical SQL injection vulnerability in ProjectWorlds Online Admission System 1.0 allows for remote, unauthenticated database manipulation.

Vulnerability Details

CVE-ID: CVE-2025-8338

Affected Software: ProjectWorlds Online Admission System

Affected Versions: 1.0

Vulnerability: This is a SQL injection vulnerability (CWE-89) located in the adminac.php file. The flaw allows an unauthenticated remote attacker to inject malicious SQL commands via the ID parameter.

Business Impact

The ability for an unauthenticated attacker to inject SQL commands poses a significant risk to data confidentiality, integrity, and availability. Successful exploitation could lead to unauthorized database access, data exfiltration, or modification of administrative records, resulting in potential service disruption and loss of sensitive information. The CVSS score of 7.3 reflects the high risk associated with remote, low-complexity attacks that do not require authentication.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the vulnerable adminac.php endpoint or disable the affected module entirely until a vendor update is released.

Proactive Monitoring: Security teams should implement rigorous monitoring for anomalous database queries and review web server access logs for suspicious input patterns targeting the adminac.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically configured to detect and block SQL injection attempts targeting the affected application parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced in the CVE record.

Analyst Notes: As of August 1, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently dangerous because it allows unauthenticated interaction with the backend database.

Analyst Recommendation

Given the availability of a public proof-of-concept and the unauthenticated nature of this vulnerability, immediate defensive action is required. Organizations using ProjectWorlds Online Admission System 1.0 must prioritize restricting network access to the application and monitor for signs of unauthorized database interaction until a formal security patch is provided by the vendor.

Description Summary:
Missing authentication in administrative scripts of the Online Time Table Generator allows unauthenticated attackers to perform unauthorized data operations via direct HTTP requests.

Executive Summary:
Unauthenticated attackers can gain full administrative control over the ProjectWorlds Online Time Table Generator due to missing session validation on critical management endpoints.

Vulnerability Details

CVE-ID: CVE-2025-70146

Affected Software: ProjectWorlds Online Time Table Generator

Affected Versions: 1.0

Vulnerability: Several administrative scripts located under the /admin/ directory fail to verify if a user is logged in. This allows an unauthenticated remote attacker to add, delete, or modify records by sending direct HTTP requests to these endpoints.

Business Impact

The lack of authentication leads to a complete loss of data integrity and availability. Attackers can wipe schedules, inject malicious data, or disrupt the primary function of the application. The CVSS score of 9.1 reflects the high impact of unauthorized administrative access.

Remediation Plan

Immediate Action: Update the software to the latest version or manually implement session checks at the beginning of every script within the /admin/ directory.

Proactive Monitoring: Audit web server access logs for requests to /admin/ endpoints that do not originate from authorized IP addresses or lack associated session cookies.

Compensating Controls: Use a reverse proxy or web server configuration to restrict access to the /admin/ directory to a specific whitelist of internal IP addresses.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Feb 18, 2026, there is no public information indicating active exploitation. However, the simplicity of exploiting missing authentication makes this a high-risk vulnerability for any internet-facing deployment.

Analyst Recommendation

Authentication bypasses on administrative interfaces are severe security failures. We recommend an immediate review of all administrative scripts to ensure robust session validation is enforced, alongside restricting network access to the management portal.

Description Summary:
ProjectWorlds Gym Management System version 1.0 contains a SQL injection vulnerability in the profile/edit.php page, allowing attackers to manipulate database queries via the id parameter.

Executive Summary:
ProjectWorlds Gym Management System version 1.0 is susceptible to an authenticated SQL injection vulnerability that could result in full database compromise.

Vulnerability Details

CVE-ID: CVE-2025-60311

Affected Software: ProjectWorlds Gym Management System

Affected Versions: 1.0

Vulnerability: The application is vulnerable to SQL injection via the id parameter within the profile/edit.php file. The vulnerability requires the attacker to be authenticated with low-level privileges to successfully execute arbitrary SQL commands against the backend database.

Business Impact

Successful exploitation of this flaw allows an authenticated attacker to execute arbitrary SQL commands, which may lead to unauthorized data access, modification, or destruction of sensitive member and system information. Given the CVSS score of 8.8, this vulnerability represents a high-severity risk that could lead to complete system compromise and significant reputational damage.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict access to the affected profile/edit.php page to trusted administrative personnel only.

Proactive Monitoring: Monitor database query logs for unusual syntax, such as UNION statements or unexpected character sequences, which may indicate exploitation attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the id parameter.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the researcher write-up linked in the CVE record.

Analyst Notes: As of October 9, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly exploitable due to the lack of input sanitization on the vulnerable parameter.

Analyst Recommendation

The vulnerability presents a significant risk to the integrity and confidentiality of the Gym Management System. Because there is currently no vendor-provided patch, organizations must implement strict access controls and WAF filtering to mitigate the risk of unauthorized data manipulation. Continuous monitoring of application logs is essential until a formal update is released.

Description Summary:
Projectworlds Advanced Library Management System 1.0 contains an unauthenticated SQL injection vulnerability in the borrow_book.php file via the roll_number parameter.

Executive Summary:
An unauthenticated SQL injection vulnerability in Projectworlds Advanced Library Management System 1.0 poses a significant risk of unauthorized data access and database manipulation.

Vulnerability Details

CVE-ID: CVE-2025-14571

Affected Software: Projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: The application is vulnerable to SQL injection within the borrow_book.php script. An unauthenticated remote attacker can manipulate the roll_number argument to execute arbitrary SQL commands against the backend database.

Business Impact

The presence of an SQL injection flaw allows for the unauthorized retrieval, modification, or deletion of sensitive library data. Given the CVSS score of 7.3, this high severity vulnerability could result in full database compromise, leading to data breaches and potential loss of system integrity.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should immediately restrict network access to the application or take the system offline if it is exposed to the public internet.

Proactive Monitoring: Monitor database query logs for suspicious patterns, such as unusual syntax, union-based queries, or attempts to access sensitive tables via the borrow_book.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads targeting the roll_number parameter.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists, as documented in the technical write-up referenced by the CVE record.

Analyst Notes: As of December 14, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is easily triggered remotely without authentication, which significantly lowers the barrier for entry for malicious actors.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability presents an urgent risk to any organization running the affected software. Security teams must implement strict access controls and WAF filtering immediately until the vendor provides an official security update to remediate the underlying code vulnerability.

Description Summary:
A SQL injection vulnerability exists in the Advanced Library Management System 1.0 via the admin_id parameter in view_admin.php, allowing remote attackers to manipulate database queries.

Executive Summary:
A remote, unauthenticated SQL injection vulnerability in projectworlds Advanced Library Management System 1.0 poses a significant risk of unauthorized database interaction.

Vulnerability Details

CVE-ID: CVE-2025-14570

Affected Software: projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: The application is susceptible to a SQL injection flaw located in the view_admin.php file. An unauthenticated remote attacker can trigger this vulnerability by manipulating the admin_id parameter to execute arbitrary SQL commands.

Business Impact

The ability to perform unauthorized SQL queries against the underlying database can lead to data exfiltration, unauthorized modification of records, or potential administrative account compromise. Given the CVSS score of 7.3, this represents a high-severity risk that could undermine the integrity and confidentiality of sensitive library data.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected system or disable the vulnerable view_admin.php component until a fix is provided by the vendor.

Proactive Monitoring: Inspect web server access logs for anomalous requests containing SQL syntax patterns or suspicious characters targeting the view_admin.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection attempts targeting the admin_id parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced by the vulnerability record.

Analyst Notes: As of December 14, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is highly accessible as it does not require authentication or user interaction.

Analyst Recommendation

Given the availability of a public proof-of-concept, the risk of exploitation is elevated. Organizations currently running version 1.0 of the projectworlds Advanced Library Management System must prioritize isolating the application from external networks and implementing strict input validation or WAF protections to mitigate the threat of SQL injection until a formal vendor patch is released.

Description Summary:
A SQL injection vulnerability exists in projectworlds Advanced Library Management System 1.0 via the book_id parameter in view_book.php, allowing remote, unauthenticated attackers to execute queries.

Executive Summary:
An unauthenticated SQL injection vulnerability in the projectworlds Advanced Library Management System 1.0 allows remote attackers to compromise database integrity and confidentiality.

Vulnerability Details

CVE-ID: CVE-2025-14527

Affected Software: projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: This is a SQL injection vulnerability (CWE-89) triggered by improper input validation of the book_id argument within the view_book.php file. The vulnerability is remotely exploitable without authentication.

Business Impact

Successful exploitation of this SQL injection flaw could lead to unauthorized access to sensitive library data, potential modification of database records, or denial of service conditions. With a CVSS score of 7.3, this high-severity vulnerability poses a significant risk to the availability and integrity of the application, potentially exposing the entire underlying database to malicious actors.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should restrict access to the affected file or the entire application via network-level controls until a vendor-supplied update is released.

Proactive Monitoring: Monitor web server access logs for anomalous requests containing SQL syntax patterns or unexpected characters directed toward view_book.php.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting the book_id parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists, as documented in the referenced GitHub issue.

Analyst Notes: As of December 11, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible due to the lack of required authentication.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability requires immediate attention. Organizations should prioritize isolating the affected component and implementing strict input validation rules at the WAF level to mitigate the risk of unauthorized database interaction until an official vendor patch is issued.

Description Summary:
A SQL injection vulnerability exists in the member_search.php file of ProjectWorlds Advanced Library Management System 1.0, allowing remote attackers to manipulate the roll_number parameter.

Executive Summary:
A remote SQL injection vulnerability in ProjectWorlds Advanced Library Management System 1.0 poses a significant risk of unauthorized database interaction.

Vulnerability Details

CVE-ID: CVE-2025-14212

Affected Software: ProjectWorlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: This vulnerability is a SQL Injection (CWE-89) flaw located in the member_search.php file. The issue allows an unauthenticated remote attacker to inject malicious SQL commands by manipulating the roll_number argument.

Business Impact

The ability to perform remote SQL injection allows an attacker to interact directly with the underlying database, potentially leading to unauthorized data exposure or modification. Given the CVSS score of 7.3, this represents a high-severity risk that could compromise the confidentiality and integrity of library records and user information.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict access to the affected file or disable the affected module until the vendor releases a security update.

Proactive Monitoring: Security teams should monitor web server logs for suspicious URL parameters containing SQL syntax or encoded characters targeting member_search.php.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules specifically configured to detect and block SQL injection patterns in HTTP requests.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced by the vulnerability record.

Analyst Notes: As of December 8, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment, a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible due to the lack of required authentication.

Analyst Recommendation

This vulnerability presents a clear risk to data integrity due to the ease of exploitation via simple URL parameter manipulation. Administrators are strongly advised to limit network exposure to the affected system and apply any forthcoming vendor updates immediately upon release to remediate the underlying code flaw.

Description Summary:
Projectworlds Advanced Library Management System 1.0 contains an SQL injection vulnerability in the delete_book.php file via the book_id parameter, allowing remote unauthenticated attackers.

Executive Summary:
A critical SQL injection vulnerability in the Projectworlds Advanced Library Management System allows unauthenticated remote attackers to compromise the underlying database.

Vulnerability Details

CVE-ID: CVE-2025-14211

Affected Software: Projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: This vulnerability is a SQL injection flaw located in the delete_book.php file. An unauthenticated remote attacker can manipulate the book_id argument to execute arbitrary SQL commands against the database.

Business Impact

The ability for an unauthenticated user to perform SQL injection poses a significant risk to data integrity and confidentiality. Successful exploitation could lead to unauthorized access to sensitive library records, potential data exfiltration, or modification of database contents. With a CVSS score of 7.3, this flaw represents a high risk to organizational security and system reliability.

Remediation Plan

Immediate Action: Since no official vendor patch is currently available, administrators should restrict network access to the affected file or disable the vulnerable component entirely.

Proactive Monitoring: Review web server access logs for anomalous requests to delete_book.php, specifically searching for suspicious SQL syntax or encoded characters within the book_id parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the identified endpoint.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced in the vulnerability report.

Analyst Notes: As of December 8, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is easily triggered remotely without authentication, making it a high priority for defensive hardening.

Analyst Recommendation

Given the availability of a public proof-of-concept and the lack of a vendor-provided patch, this vulnerability presents an immediate risk. Security teams should prioritize isolating the vulnerable application from public network access and implement strict input validation or WAF filtering to prevent exploitation until a formal update is released.

Description Summary:
Advanced Library Management System 1.0 contains a SQL injection vulnerability in the delete_member.php file, allowing remote, unauthenticated attackers to manipulate the user_id argument.

Executive Summary:
A critical SQL injection vulnerability in the projectworlds Advanced Library Management System allows unauthenticated remote attackers to compromise the application database.

Vulnerability Details

CVE-ID: CVE-2025-14210

Affected Software: projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: This is a SQL injection flaw (CWE-89) located in the delete_member.php file. The vulnerability allows an unauthenticated, remote attacker to manipulate the user_id parameter to execute arbitrary SQL commands against the backend database.

Business Impact

The ability for an unauthenticated attacker to inject SQL queries poses a severe risk to data integrity and confidentiality. Successful exploitation could lead to unauthorized data exfiltration, modification of library records, or potential administrative account takeover. With a CVSS score of 7.3, this high-severity vulnerability warrants immediate attention to prevent unauthorized database access.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict access to the vulnerable delete_member.php file or disable the affected module entirely until a vendor-supplied security update is released.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax patterns or unexpected parameters directed at the delete_member.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule specifically configured to block or sanitize malicious input patterns targeting SQL injection vectors in the user_id parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub issue referenced in the CVE record.

Analyst Notes: As of December 8, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible due to the lack of required authentication.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability presents a significant risk to affected installations. Administrators must prioritize restricting access to the vulnerable component and implement defensive WAF rules immediately. Monitor vendor communication channels closely for the release of a permanent patch, which should be applied as soon as it becomes available.

Description Summary:
The Advanced Library Management System 1.0 contains an unauthenticated SQL injection vulnerability in the delete_admin.php file via the admin_id parameter.

Executive Summary:
A critical SQL injection vulnerability in the projectworlds Advanced Library Management System allows unauthenticated attackers to compromise the underlying database.

Vulnerability Details

CVE-ID: CVE-2025-13572

Affected Software: projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: The application fails to properly sanitize the admin_id parameter in the delete_admin.php file, allowing unauthenticated remote attackers to inject malicious SQL queries. This flaw permits direct interaction with the database backend without requiring any administrative credentials.

Business Impact

Successful exploitation of this vulnerability enables unauthorized database access, which can lead to sensitive data leakage, unauthorized modification or deletion of records, and potential full system compromise. Given the CVSS score of 7.3, the risk of data integrity loss and service disruption is high, particularly for systems managing library patron or administrative information.

Remediation Plan

Immediate Action: As no official vendor patch is currently available, administrators should restrict access to the delete_admin.php file via network-level controls or disable the vulnerable component until a fix is released.

Proactive Monitoring: Inspect web server access logs for anomalous GET requests targeting delete_admin.php, particularly those containing SQL syntax characters such as single quotes, semicolons, or sleep commands.

Compensating Controls: Implement a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns targeting the admin_id parameter.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the linked research writeup by GYSakura.

Analyst Notes: As of November 25, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible as it requires no authentication to trigger.

Analyst Recommendation

Due to the lack of an official patch and the availability of public proof-of-concept code, this vulnerability poses a significant risk to the integrity of the affected system. Administrators must prioritize isolating the vulnerable application from public access and monitor for any signs of unauthorized database interaction until a formal security update is provided by the vendor.

Description Summary:
Projectworlds Online Admission System 1.0 contains a SQL injection vulnerability in the process_login.php file, allowing remote, unauthenticated attackers to manipulate the keywords argument.

Executive Summary:
An unauthenticated SQL injection vulnerability in the Projectworlds Online Admission System 1.0 poses a significant risk of unauthorized database interaction and potential data exposure.

Vulnerability Details

CVE-ID: CVE-2025-12938

Affected Software: Projectworlds Online Admission System

Affected Versions: 1.0

Vulnerability: This is a SQL injection vulnerability (CWE-89) triggered via the keywords argument in the process_login.php file. The vulnerability is remotely exploitable by an unauthenticated attacker, as indicated by the CVSS vector PR:N (Privileges Required: None).

Business Impact

The ability to perform unauthenticated SQL injection allows an attacker to interact directly with the application database. This could lead to the unauthorized disclosure of sensitive applicant or user data, potentially resulting in severe reputational damage and compliance failures. With a CVSS score of 7.3, this flaw is categorized as High severity, necessitating immediate attention to prevent unauthorized data access.

Remediation Plan

Immediate Action: Since no official patch is currently identified, administrators should restrict access to the affected login endpoint using network-level controls or disable the service until a secure version is released.

Proactive Monitoring: Monitor database query logs for unusual patterns, specifically looking for SQL syntax characters or unexpected keywords originating from the process_login.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the login endpoint.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the linked GitHub repository.

Analyst Notes: As of November 10, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently dangerous because it allows unauthenticated interaction with backend database structures.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability presents a credible risk to the integrity of the Online Admission System. Organizations currently hosting this software should prioritize isolating the application or implementing strict WAF filtering until the vendor provides a formal security update to remediate the underlying SQL injection flaw.

Description Summary:
Projectworlds Advanced Library Management System 1.0 is vulnerable to remote SQL injection via the keywords argument in index.php, allowing unauthenticated attackers to manipulate database queries.

Executive Summary:
A critical SQL injection vulnerability in Projectworlds Advanced Library Management System 1.0 allows unauthenticated remote attackers to compromise database integrity and confidentiality.

Vulnerability Details

CVE-ID: CVE-2025-12237

Affected Software: Projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: This is a SQL injection vulnerability (CWE-89) affecting the index.php file. Unauthenticated attackers can inject malicious SQL commands via the keywords parameter, enabling unauthorized database interaction.

Business Impact

The vulnerability carries a CVSS score of 7.3, indicating a high level of risk due to the potential for remote exploitation without prior authentication. Successful exploitation may lead to the exfiltration of sensitive library data, unauthorized modification of records, or complete compromise of the backend database, resulting in significant operational disruption and data loss.

Remediation Plan

Immediate Action: Since no official patch is currently identified, restrict external access to the affected web directory and implement strict input validation for the keywords parameter in index.php.

Proactive Monitoring: Monitor database query logs for syntax errors or anomalous patterns associated with SQL injection attempts. Review web server logs for suspicious HTTP requests targeting the index.php script.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules specifically configured to block common SQL injection payloads in URL parameters to mitigate the risk of unauthorized exploitation.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the vulnerability disclosure on GitHub.

Analyst Notes: As of October 27, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous because it allows unauthenticated remote execution of database queries, which is a highly sought-after vector for attackers.

Analyst Recommendation

Given the high severity of this vulnerability and the existence of a public proof-of-concept, users are urged to treat this as an urgent security risk. Organizations should immediately implement the suggested compensating controls and monitor for signs of unauthorized database activity while awaiting a formal vendor patch.

Description Summary:
A SQL injection vulnerability in Projectworlds Online Shopping System 1.0 allows remote attackers to manipulate the keywords argument in login_submit.php.

Executive Summary:
A critical SQL injection vulnerability in Projectworlds Online Shopping System 1.0 exposes the application to remote, unauthenticated database manipulation.

Vulnerability Details

CVE-ID: CVE-2025-12215

Affected Software: Projectworlds Online Shopping System

Affected Versions: 1.0

Vulnerability: The vulnerability is a SQL injection (CWE-89) located within the login_submit.php file. An unauthenticated attacker can exploit this by injecting malicious SQL commands into the keywords parameter, allowing for unauthorized interaction with the underlying database.

Business Impact

The ability to perform SQL injection poses a significant risk to the confidentiality and integrity of the application, as it potentially allows attackers to bypass authentication, extract sensitive user data, or modify database contents. With a CVSS score of 7.3, this high-severity flaw could lead to full compromise of the application data, resulting in severe reputational damage and potential regulatory non-compliance regarding data protection.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the affected login_submit.php endpoint or disable the vulnerable module until a security update is released by the vendor.

Proactive Monitoring: Review web server access logs for anomalous traffic patterns, specifically looking for SQL syntax characters such as single quotes, semicolons, and comment indicators within the keywords parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection patterns targeting the login_submit.php script.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as referenced in the GitHub issue linked by the CVE record.

Analyst Notes: As of October 28, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous due to its remote, unauthenticated, and automatable nature.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of remote exploitation, this vulnerability presents an immediate risk to any deployment of Projectworlds Online Shopping System 1.0. Organizations should prioritize isolating the affected system from the public internet and applying strict input validation or security patches as soon as the vendor provides them.

Description Summary:
A SQL injection vulnerability exists in the Online Ordering Food System 1.0 via the Status argument in /all-orders.php, allowing for potential remote exploitation.

Executive Summary:
The projectworlds Online Ordering Food System 1.0 contains a critical SQL injection vulnerability that allows unauthenticated remote attackers to manipulate database queries.

Vulnerability Details

CVE-ID: CVE-2025-11604

Affected Software: projectworlds Online Ordering Food System

Affected Versions: 1.0

Vulnerability: This vulnerability is a SQL injection (CWE-89) triggered through the Status parameter in the /all-orders.php file. Based on the CVSS vector (PR:N), the attack can be executed by an unauthenticated user with no required privileges.

Business Impact

Successful exploitation of this flaw allows an attacker to interact directly with the backend database, potentially leading to unauthorized data disclosure or modification. With a CVSS score of 7.3, this high-severity vulnerability poses a significant risk to the integrity and confidentiality of the ordering system, which could lead to service disruption or the loss of sensitive customer data.

Remediation Plan

Immediate Action: As no official patch is currently available, administrators should immediately restrict access to the /all-orders.php endpoint or disable the affected functionality until a vendor-supplied update is released.

Proactive Monitoring: Security teams should monitor web server logs for anomalous requests containing SQL syntax patterns, particularly those targeting the Status parameter within the specified file.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block incoming HTTP requests that contain suspicious SQL injection payloads directed at the vulnerable endpoint.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the GitHub reference provided in the CVE record.

Analyst Notes: As of October 12, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The presence of a public proof-of-concept significantly lowers the barrier to entry for potential attackers.

Analyst Recommendation

Given the ease of exploitation and the exposure of the vulnerable endpoint, this issue represents a significant security risk. Organizations utilizing this software must prioritize the implementation of WAF rules or network-level access controls to block exploitation attempts while awaiting a formal patch from the vendor.

Description Summary:
A SQL injection vulnerability exists in projectworlds Gate Pass Management System 1.0 via the fullname argument in add-pass.php, allowing remote attackers to execute unauthorized database queries.

Executive Summary:
A remote SQL injection vulnerability in projectworlds Gate Pass Management System 1.0 exposes the application to unauthorized database manipulation and potential data exfiltration.

Vulnerability Details

CVE-ID: CVE-2025-11557

Affected Software: projectworlds Gate Pass Management System

Affected Versions: 1.0

Vulnerability: This vulnerability is a SQL injection flaw (CWE-89) triggered by improper sanitization of the fullname parameter within the add-pass.php file. The vulnerability is remotely exploitable by an unauthenticated attacker.

Business Impact

The identified vulnerability carries a CVSS score of 7.3, reflecting a High severity risk due to the potential for remote, unauthenticated exploitation. Successful exploitation allows an attacker to compromise the integrity and confidentiality of the underlying database, which may lead to unauthorized data access or disruption of business operations related to gate pass management.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict access to the add-pass.php endpoint via network controls or disable the affected module entirely.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax or unusual characters directed at the add-pass.php file.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection patterns targeting the fullname parameter.

Exploitation Status

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the referenced GitHub issue.

Analyst Notes: As of October 10, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The flaw is inherently dangerous as it provides a direct vector for database interaction without requiring user authentication.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of remote exploitation, this vulnerability poses a significant risk to affected systems. Organizations utilizing projectworlds Gate Pass Management System 1.0 must prioritize the implementation of compensating controls such as WAF filtering or network segmentation until an official vendor patch is released and applied.

Description Summary:
Projectworlds Advanced Library Management System 1.0 contains an unauthenticated SQL injection vulnerability in the user_id argument of the view_member.php file.

Executive Summary:
A critical SQL injection vulnerability in projectworlds Advanced Library Management System 1.0 allows unauthenticated remote attackers to manipulate database queries.

Vulnerability Details

CVE-ID: CVE-2025-11475

Affected Software: projectworlds Advanced Library Management System

Affected Versions: 1.0

Vulnerability: This flaw is a SQL injection vulnerability (CWE-89) located within the user_id parameter of the view_member.php script. The vulnerability is exploitable by an unauthenticated remote attacker who can inject malicious SQL commands into the backend database.

Business Impact

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive library member data, potential database modification, or full database compromise. With a CVSS score of 7.3, this high-severity flaw poses a significant risk to the confidentiality and integrity of the system, potentially facilitating further unauthorized access to the hosting environment.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict network access to the vulnerable view_member.php file or disable the affected functionality entirely until a vendor update is released.

Proactive Monitoring: Review web server access logs for anomalous requests containing SQL syntax or unusual query patterns targeting the view_member.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block SQL injection payloads targeting the application.

Exploitation Status

Public Exploit Available: Yes — a published proof-of-concept exists, as documented in the referenced GitHub issue.

Analyst Notes: As of October 9, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is inherently dangerous due to its remote, unauthenticated nature.

Analyst Recommendation

Given the availability of a public proof-of-concept and the ease of exploitation, this vulnerability requires immediate attention. Security teams should prioritize blocking access to the vulnerable endpoint and monitor for signs of unauthorized database interaction until a vendor-supplied patch is available.

Description Summary:
Projectworlds Online Shopping System 1.0 is vulnerable to SQL injection via the ID argument in the store/cart_add.php file, allowing remote attackers to manipulate database queries.

Executive Summary:
Projectworlds Online Shopping System 1.0 contains a critical SQL injection vulnerability that allows unauthenticated remote attackers to manipulate database queries and potentially compromise system data.

Vulnerability Details

CVE-ID: CVE-2025-11070

Affected Software: Projectworlds Online Shopping System

Affected Versions: 1.0

Vulnerability: This vulnerability is a SQL injection (CWE-89) flaw located in the store/cart_add.php file. The lack of proper input validation on the ID argument allows an unauthenticated remote attacker to execute arbitrary SQL commands.

Business Impact

The ability to perform SQL injection poses a significant risk to the confidentiality and integrity of the application database. With a CVSS score of 7.3, this high-severity flaw could allow attackers to exfiltrate sensitive customer data, modify order information, or gain unauthorized access to the underlying database management system, leading to severe reputational damage and potential regulatory non-compliance.

Remediation Plan

Immediate Action: As no official vendor patch is currently available, administrators should restrict access to the vulnerable store/cart_add.php file or disable the affected shopping module until a security update is released by the vendor.

Proactive Monitoring: Security teams should monitor web access logs for suspicious patterns, specifically looking for URL parameters containing SQL syntax or unusual GET/POST requests directed at the /store/cart_add.php endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to detect and block common SQL injection payloads targeting the application.

Exploitation Status

Public Exploit Available: Yes, a published proof-of-concept exists as documented in the referenced security report.

Analyst Notes: As of September 28, 2025, there is no confirmed active exploitation in the wild; however, per CISA's SSVC assessment a proof-of-concept exists, so exploitation risk should be treated as credible. The vulnerability is highly accessible due to the unauthenticated nature of the attack vector.

Analyst Recommendation

Given the high CVSS score and the existence of a public proof-of-concept, this vulnerability represents a significant risk to the application environment. Organizations currently utilizing Projectworlds Online Shopping System 1.0 should prioritize the implementation of compensating controls such as WAF rules immediately, as no official vendor patch is currently available to remediate the underlying flaw.