Approved changes feed: RSS · Atom

cpe:2.3:a:projectworlds:visitor_management_system_in_php:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorProjectworlds (1c49ba31-3767-5ff6-9610-c6dcb2aee835)
ProductVisitor Management System In Php (f61ac9fa-8399-57fd-b1ce-856bb4cdcc16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22983 vulnerable 2026-06-03 14:55:01.530062 Details available
SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate privileges via the name parameter in the myform.php endpoint.
Published: 2024-02-28T00:00:00.000Z
Updated: 2025-03-27T21:13:21.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22922 vulnerable 2026-06-03 14:55:01.513238 Details available
An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php
Published: 2024-01-25T00:00:00.000Z
Updated: 2025-06-04T21:18:04.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25761 vulnerable 2026-06-03 14:42:15.379052 Details available
Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform various attacks such as stealing of cookies,sensitive information etc.
Published: 2020-09-29T19:06:00.000Z
Updated: 2025-11-11T16:54:20.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25760 vulnerable 2026-06-03 14:42:15.377521 Details available
Projectworlds Visitor Management System in PHP 1.0 allows SQL Injection. The file front.php does not perform input validation on the 'rid' parameter. An attacker can append SQL queries to the input to extract sensitive information from the database.
Published: 2020-09-29T19:00:10.000Z
Updated: 2025-11-11T16:57:59.747Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.