Lql120

**Name of the Vulnerable Software and Affected Versions** projectworlds Life Insurance Management System version 1.0 **Description** A critical vulnerability was found in the projectworlds Life Insurance Management System. The issue affects an unknown functionality of the file /deleteNominee.php, where the manipulation of the `nominee id` argument leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For projectworlds Life Insurance Management System version 1.0, consider disabling the /deleteNominee.php file or restricting access to it until a patch is available. As a temporary workaround, avoid using the `nominee id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Projectworlds Life Insurance Management System version 1.0 **Description** A critical vulnerability has been found in the Projectworlds Life Insurance Management System. The issue affects some unknown functionality of the file /deletePayment.php. The manipulation of the `recipt no` argument leads to SQL injection. The attack may be launched remotely. **Recommendations** For Projectworlds Life Insurance Management System version 1.0, as a temporary workaround, consider restricting access to the /deletePayment.php file until a patch is available. Additionally, avoid using the `recipt no` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** projectworlds Life Insurance Management System version 1.0 **Description** A critical vulnerability was found in the projectworlds Life Insurance Management System. This issue affects an unknown part of the file `/editAgent.php`. The manipulation of the `agent id` argument leads to SQL injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For projectworlds Life Insurance Management System version 1.0, as a temporary workaround, consider restricting access to the `/editAgent.php` file until a patch is available. Avoid using the `agent id` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Projectworlds Life Insurance Management System version 1.0 **Description** A critical vulnerability has been found in the Projectworlds Life Insurance Management System. This issue affects the file /updateAgent.php, where the manipulation of the `agent id` argument leads to SQL injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider disabling the /updateAgent.php file until a patch is available. Restrict access to the `agent id` argument in the /updateAgent.php file to minimize the risk of exploitation. Avoid using the `agent id` argument in the /updateAgent.php file until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** projectworlds Life Insurance Management System version 1.0 **Description** A critical issue affects the processing of the file "/search.php". The manipulation of the `key` argument leads to SQL injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For projectworlds Life Insurance Management System version 1.0, consider disabling the `/search.php` file or restricting access to it until a patch is available. As a temporary workaround, avoid using the `key` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** projectworlds Online Hotel Booking version 1.0 **Description** A critical issue has been identified, affecting the /reservation.php file, where manipulation of the `checkin` argument leads to SQL injection. This issue can be exploited remotely. **Recommendations** For projectworlds Online Hotel Booking version 1.0, as a temporary workaround, consider restricting access to the /reservation.php file or disabling the manipulation of the `checkin` argument until a patch is available.

**Name of the Vulnerable Software and Affected Versions** projectworlds Online Hotel Booking version 1.0 **Description** A critical issue affects some unknown processing of the file /booknow.php?roomname=Duplex. The manipulation of the `checkin` argument leads to SQL injection. The attack may be initiated remotely. Other parameters might be affected as well. **Recommendations** As a temporary workaround, consider restricting access to the `/booknow.php` endpoint until a patch is available. Avoid using the `checkin` parameter in the affected API endpoint until the issue is resolved. Restrict access to the vulnerable file `/booknow.php` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ProjectWorlds Online Hotel Booking version 1.0 **Description** A critical vulnerability has been found in ProjectWorlds Online Hotel Booking. The issue affects an unknown function of the file /admin/login.php. Manipulation of the `emailusername` argument leads to SQL injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. **Recommendations** For ProjectWorlds Online Hotel Booking version 1.0, consider disabling the unknown function of the file /admin/login.php as a temporary workaround until a patch is available. Restrict access to the /admin/login.php file to minimize the risk of exploitation. Avoid using the `emailusername` argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** projectworlds Online Hotel Booking version 1.0 **Description** A critical issue has been found, affecting an unknown part of the file /admin/addroom.php. The manipulation of the `roomname` argument leads to SQL injection. It is possible to initiate the attack remotely. **Recommendations** For projectworlds Online Hotel Booking version 1.0, as a temporary workaround, consider restricting access to the /admin/addroom.php file until a patch is available. Avoid using the `roomname` argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.