1000 Projects vulnerabilities

Products

• Portfolio Management System MCA 16
• Beauty Parlour Management System 13
• Bookstore Management System 13
• Attendance Tracking Management System 11
• Sales Management System 5
• ABC Courier Management System 4
• Daily College Class Work Report Book 3
• Campaign Management System Platform for Women 2
• Employee Task Management System 2
• Human Resource Management System 2
• Library Management System 2
• Online Notice Board 1

Latest 1000 Projects CVEs

Newest publication first · page 1 of 3

1. CVE-2026-7144 1000 Projects Portfolio Management System MCA update_passwd_process.php authorization

   Published 2026-04-27

   Medium·CVSS 5.3 EPSS 0.22%

   A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The e...

2. CVE-2026-7143 1000 Projects Portfolio Management System MCA block_status.php sql injection

   Published 2026-04-27

   Medium·CVSS 5.3 EPSS 0.19%

   A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicl...

3. CVE-2025-8936 1000 Projects Sales Management System dordupdate.php sql injection

   Published 2025-08-14

   Medium·CVSS 6.9 EPSS 0.51%

   A vulnerability was determined in 1000 Projects Sales Management System 1.0. Affected by this issue is some unknown functionality of the file /superstore/dist/dordupdate.php. The manipulation of the argument select2 leads to sql injection. The attack may be launched remotely. The...

4. CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

   Published 2025-08-14

   Medium·CVSS 6.9 EPSS 0.57%

   A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The explo...

5. CVE-2025-8934 1000 Projects Sales Management System sales.php cross site scripting

   Published 2025-08-14

   Medium·CVSS 5.3 EPSS 0.47%

   A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file /sales.php. The manipulation of the argument select2112 leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been discl...

6. CVE-2025-8933 1000 Projects Sales Management System sales.php cross site scripting

   Published 2025-08-14

   Medium·CVSS 5.3 EPSS 0.47%

   A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exp...

7. CVE-2025-8932 1000 Projects Sales Management System sales.php sql injection

   Published 2025-08-14

   Medium·CVSS 6.9 EPSS 0.57%

   A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to sql injection. The attack can be initiated remotely. The exploit has b...

8. CVE-2025-8241 1000 Projects ABC Courier Management System report.php sql injection

   Published 2025-07-27

   Medium·CVSS 6.9 EPSS 0.61%

   A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This affects an unknown part of the file /report.php. The manipulation of the argument From leads to sql injection. It is possible to initiate the attack remotely. The...

9. CVE-2025-8185 1000 Projects ABC Courier Management System getbyid.php sql injection

   Published 2025-07-26

   Medium·CVSS 6.9 EPSS 0.54%

   A vulnerability was found in 1000 Projects ABC Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /getbyid.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. Th...

10. CVE-2025-8173 1000 Projects ABC Courier Management System Add_reciver.php sql injection

    Published 2025-07-25

    Medium·CVSS 6.9 EPSS 0.62%

    A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /Add_reciver.php. The manipulation of the argument reciver_name leads to sql injection. The attack...

11. CVE-2025-5778 1000 Projects ABC Courier Management System admin sql injection

    Published 2025-06-06

    Medium·CVSS 6.9 EPSS 0.57%

    A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. Affected is an unknown function of the file /admin. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The...

12. CVE-2025-5332 1000 Projects Online Notice Board index.php sql injection

    Published 2025-05-29

    Medium·CVSS 6.9 EPSS 0.63%

    A vulnerability was found in 1000 Projects Online Notice Board 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has b...

13. CVE-2025-5205 1000 Projects Daily College Class Work Report Book dcwr_entry.php sql injection

    Published 2025-05-26

    Medium·CVSS 6.9 EPSS 0.63%

    A vulnerability classified as critical has been found in 1000 Projects Daily College Class Work Report Book 1.0. Affected is an unknown function of the file /dcwr_entry.php. The manipulation of the argument Date leads to sql injection. It is possible to launch the attack remotely...

14. CVE-2025-4940 1000 Projects Daily College Class Work Report Book admin_info.php sql injection

    Published 2025-05-19

    Medium·CVSS 6.9 EPSS 0.52%

    A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown processing of the file /admin_info.php. The manipulation of the argument batch leads to sql injection. The attack may be in...

15. CVE-2025-3384 1000 Projects Human Resource Management System employee.php sql injection

    Published 2025-04-07

    Medium·CVSS 6.9 EPSS 0.57%

    A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the a...

16. CVE-2025-1189 1000 Projects Attendance Tracking Management System chart1.php sql injection

    Published 2025-02-12

    Medium·CVSS 5.3 EPSS 0.46%

    A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument course_id leads to sql injection. It is possible to initiate the a...

17. CVE-2025-1174 1000 Projects Bookstore Management System Add Book Page process_book_add.php cross site scripting

    Published 2025-02-11

    Medium·CVSS 4.8 EPSS 0.51%

    A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file process_book_add.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site s...

18. CVE-2025-1173 1000 Projects Bookstore Management System process_users_del.php sql injection

    Published 2025-02-11

    Medium·CVSS 5.1 EPSS 0.67%

    A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file process_users_del.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotel...

19. CVE-2025-1172 1000 Projects Bookstore Management System addtocart.php sql injection

    Published 2025-02-11

    Medium·CVSS 5.3 EPSS 0.55%

    A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be laun...

20. CVE-2025-0847 1000 Projects Employee Task Management System Login index.php sql injection

    Published 2025-01-30

    Medium·CVSS 6.9 EPSS 0.63%

    A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can b...

21. CVE-2025-0846 1000 Projects Employee Task Management System AdminLogin.php sql injection

    Published 2025-01-30

    Medium·CVSS 6.9 EPSS 0.54%

    A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/AdminLogin.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack...

22. CVE-2025-0536 1000 Projects Attendance Tracking Management System edit_action.php sql injection

    Published 2025-01-17

    Medium·CVSS 5.3 EPSS 0.58%

    A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_action.php. The manipulation of the argument attendance_id leads to sql injection. The attack can be initia...

23. CVE-2025-0534 1000 Projects Campaign Management System Platform for Women loginnew.php sql injection

    Published 2025-01-17

    Medium·CVSS 6.9 EPSS 0.65%

    A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Code/loginnew.php. The manipulation of the argument Username leads to sql injection. The...

24. CVE-2025-0533 1000 Projects Campaign Management System Platform for Women sc_login.php sql injection

    Published 2025-01-17

    Medium·CVSS 6.9 EPSS 0.65%

    A vulnerability was found in 1000 Projects Campaign Management System Platform for Women 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Code/sc_login.php. The manipulation of the argument uname leads to sql injection...

25. CVE-2024-13072 1000 Projects Beauty Parlour Management System Customer Detail add-customer-services.php sql injection

    Published 2024-12-31

    Medium·CVSS 5.3 EPSS 0.67%

    A vulnerability was found in 1000 Projects Beauty Parlour Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add-customer-services.php of the component Customer Detail Handler. The manipulation of the argu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.