Approved changes feed: RSS · Atom

cpe:2.3:a:projectworlds:life_insurance_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorProjectworlds (1c49ba31-3767-5ff6-9610-c6dcb2aee835)
ProductLife Insurance Management System (e88347f8-44da-5ec5-8eff-345558b3ce9d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6136 vulnerable 2026-06-03 15:12:26.800420 Projectworlds Life Insurance Management System insertPayment.php sql injection
MEDIUM (6.3)
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-16T19:31:05.649Z
Updated: 2025-06-17T13:54:14.838Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6135 vulnerable 2026-06-03 15:12:26.799824 Projectworlds Life Insurance Management System insertNominee.php sql injection
MEDIUM (6.3)
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument client_id/nominee_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-16T19:00:14.136Z
Updated: 2025-06-17T13:55:40.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6134 vulnerable 2026-06-03 15:12:26.799305 Projectworlds Life Insurance Management System insertClient.php sql injection
MEDIUM (6.3)
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument client_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-06-16T18:31:04.855Z
Updated: 2025-06-16T18:54:32.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6133 vulnerable 2026-06-03 15:12:26.798588 Projectworlds Life Insurance Management System insertagent.php sql injection
MEDIUM (6.3)
A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /insertagent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-16T18:00:15.805Z
Updated: 2025-06-16T18:56:48.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4836 vulnerable 2026-06-03 15:01:48.838130 Projectworlds Life Insurance Management System deleteAgent.php sql injection
HIGH (7.3)
A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /deleteAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-17T20:00:06.067Z
Updated: 2025-05-19T14:36:29.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2067 vulnerable 2026-06-03 15:00:15.746214 projectworlds Life Insurance Management System search.php sql injection
HIGH (7.3)
A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T04:31:05.867Z
Updated: 2025-03-07T16:26:14.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2066 vulnerable 2026-06-03 15:00:15.745843 projectworlds Life Insurance Management System updateAgent.php sql injection
HIGH (7.3)
A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /updateAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T04:31:04.267Z
Updated: 2025-03-07T16:29:21.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2065 vulnerable 2026-06-03 15:00:15.745228 projectworlds Life Insurance Management System editAgent.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /editAgent.php. The manipulation of the argument agent_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T04:00:11.779Z
Updated: 2025-03-07T17:44:55.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2064 vulnerable 2026-06-03 15:00:15.744686 projectworlds Life Insurance Management System deletePayment.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T04:00:09.372Z
Updated: 2025-03-07T17:52:29.898Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2063 vulnerable 2026-06-03 15:00:15.744311 projectworlds Life Insurance Management System deleteNominee.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T03:31:05.557Z
Updated: 2025-03-07T18:59:06.980Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2062 vulnerable 2026-06-03 15:00:15.743821 projectworlds Life Insurance Management System clientStatus.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clientStatus.php. The manipulation of the argument client_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-07T03:31:04.016Z
Updated: 2025-03-10T19:35:38.442Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36598 vulnerable 2026-06-03 14:56:04.962556 Details available
An arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary code via uploading a crafted image file.
Published: 2024-06-14T00:00:00.000Z
Updated: 2024-08-02T03:37:05.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36597 vulnerable 2026-06-03 14:56:04.962175 Details available
Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.
Published: 2024-06-14T00:00:00.000Z
Updated: 2026-02-06T14:50:14.931Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10735 vulnerable 2026-06-03 14:54:12.442419 Project Worlds Life Insurance Management System editNominee.php sql injection
MEDIUM (6.3)
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-03T14:00:06.518Z
Updated: 2024-11-04T20:33:59.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10734 vulnerable 2026-06-03 14:54:12.440455 Project Worlds Life Insurance Management System editPayment.php sql injection
MEDIUM (6.3)
A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument recipt_no leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-03T13:00:08.355Z
Updated: 2024-11-04T19:19:17.343Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.