GCVE - cpe:2.3:a:projectworlds:life_insurance_management

Approved changes feed: RSS · Atom

cpe:2.3:a:projectworlds:life_insurance_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Projectworlds (`1c49ba31-3767-5ff6-9610-c6dcb2aee835`)
Product	Life Insurance Management System (`e88347f8-44da-5ec5-8eff-345558b3ce9d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6136`	vulnerable	2026-06-03 15:12:26.800296	Projectworlds Life Insurance Management System insertPayment.php sql injection MEDIUM (6.3) A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-16T19:31:05.649Z Updated: 2025-06-17T13:54:14.838Z Open on db.gcve.eu Reference links https://vuldb.com/?id.312605 https://vuldb.com/?ctiid.312605 https://vuldb.com/?submit.592842 https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertPayment.php.md https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertPayment.php.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6135`	vulnerable	2026-06-03 15:12:26.799787	Projectworlds Life Insurance Management System insertNominee.php sql injection MEDIUM (6.3) A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /insertNominee.php. The manipulation of the argument client_id/nominee_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-16T19:00:14.136Z Updated: 2025-06-17T13:55:40.047Z Open on db.gcve.eu Reference links https://vuldb.com/?id.312604 https://vuldb.com/?ctiid.312604 https://vuldb.com/?submit.592840 https://vuldb.com/?submit.592841 https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertNominee.php_client_id.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6134`	vulnerable	2026-06-03 15:12:26.799162	Projectworlds Life Insurance Management System insertClient.php sql injection MEDIUM (6.3) A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /insertClient.php. The manipulation of the argument client_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Published: 2025-06-16T18:31:04.855Z Updated: 2025-06-16T18:54:32.701Z Open on db.gcve.eu Reference links https://vuldb.com/?id.312603 https://vuldb.com/?ctiid.312603 https://vuldb.com/?submit.592839 https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertClient_client_id.md https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertClient_client_id.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6133`	vulnerable	2026-06-03 15:12:26.797658	Projectworlds Life Insurance Management System insertagent.php sql injection MEDIUM (6.3) A vulnerability was found in Projectworlds Life Insurance Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /insertagent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-16T18:00:15.805Z Updated: 2025-06-16T18:56:48.769Z Open on db.gcve.eu Reference links https://vuldb.com/?id.312602 https://vuldb.com/?ctiid.312602 https://vuldb.com/?submit.592838 https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertAgent.php_agent_id.md https://github.com/YZS17/CVE/blob/main/Life_Insurance_Management_System/sqli_insertAgent.php_agent_id.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4836`	vulnerable	2026-06-03 15:01:48.837298	Projectworlds Life Insurance Management System deleteAgent.php sql injection HIGH (7.3) A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /deleteAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-05-17T20:00:06.067Z Updated: 2025-05-19T14:36:29.953Z Open on db.gcve.eu Reference links https://vuldb.com/?id.309302 https://vuldb.com/?ctiid.309302 https://vuldb.com/?submit.574617 https://github.com/Aiyakami/CVE-1/issues/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2067`	vulnerable	2026-06-03 15:00:15.746183	projectworlds Life Insurance Management System search.php sql injection HIGH (7.3) A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T04:31:05.867Z Updated: 2025-03-07T16:26:14.806Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298823 https://vuldb.com/?ctiid.298823 https://vuldb.com/?submit.514762 https://github.com/ubfbuz3/cve/issues/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2066`	vulnerable	2026-06-03 15:00:15.745742	projectworlds Life Insurance Management System updateAgent.php sql injection HIGH (7.3) A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /updateAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T04:31:04.267Z Updated: 2025-03-07T16:29:21.393Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298822 https://vuldb.com/?ctiid.298822 https://vuldb.com/?submit.514759 https://github.com/ubfbuz3/cve/issues/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2065`	vulnerable	2026-06-03 15:00:15.745189	projectworlds Life Insurance Management System editAgent.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /editAgent.php. The manipulation of the argument agent_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T04:00:11.779Z Updated: 2025-03-07T17:44:55.614Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298821 https://vuldb.com/?ctiid.298821 https://vuldb.com/?submit.514758 https://github.com/ubfbuz3/cve/issues/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2064`	vulnerable	2026-06-03 15:00:15.744654	projectworlds Life Insurance Management System deletePayment.php sql injection HIGH (7.3) A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T04:00:09.372Z Updated: 2025-03-07T17:52:29.898Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298820 https://vuldb.com/?ctiid.298820 https://vuldb.com/?submit.514751 https://github.com/ubfbuz3/cve/issues/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2063`	vulnerable	2026-06-03 15:00:15.744272	projectworlds Life Insurance Management System deleteNominee.php sql injection HIGH (7.3) A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T03:31:05.557Z Updated: 2025-03-07T18:59:06.980Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298819 https://vuldb.com/?ctiid.298819 https://vuldb.com/?submit.514749 https://github.com/ubfbuz3/cve/issues/5	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2062`	vulnerable	2026-06-03 15:00:15.742743	projectworlds Life Insurance Management System clientStatus.php sql injection HIGH (7.3) A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clientStatus.php. The manipulation of the argument client_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T03:31:04.016Z Updated: 2025-03-10T19:35:38.442Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298818 https://vuldb.com/?ctiid.298818 https://vuldb.com/?submit.514722 https://github.com/akjedfha/cve/issues/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Life Insurance Management System

PURL mappings

Vulnerability references

Contribute