Vulnerabilities in 1000 Projects

74 results
Vexday analysis

Com 74 CVEs catalogadas e nenhum registro no CISA KEV, o portfólio do vendor 1000 Projects apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere menor pressão imediata de ataques em curso. A ausência de vulnerabilidades de severidade crítica reforça esse perfil de risco contido, embora dois PoCs públicos disponíveis — incluindo CVE-2024-11591, a CVE de maior pontuação EPSS observada (0,0094) — mantenham uma superfície de exposição que merece monitoramento. O tipo de falha mais recorrente, CWE-74 (injeção), indica padrões de desenvolvimento que favorecem vulnerabilidades de neutralização inadequada de entrada, exigindo atenção em revisões de código e validação de dados. O surgimento de duas CVEs nos últimos 90 dias sinaliza atividade contínua de descoberta, recomendando ciclos regulares de avaliação mesmo diante do baixo índice de exploração confirmada.

CVE-2025-0534MEDIUM1000 Projects Campaign Management System Platform for Women loginnew.php sql injectionEPSS 0.6%CVE-2025-0533MEDIUM1000 Projects Campaign Management System Platform for Women sc_login.php sql injectionEPSS 0.6%CVE-2025-0847MEDIUM1000 Projects Employee Task Management System Login index.php sql injectionEPSS 0.6%CVE-2024-11100MEDIUM1000 Projects Beauty Parlour Management System index.php sql injectionEPSS 0.6%CVE-2024-12187MEDIUM1000 Projects Library Management System showbook.php sql injectionEPSS 0.6%CVE-2024-12946MEDIUM1000 Projects Attendance Tracking Management System admin_action.php sql injectionEPSS 0.6%CVE-2024-12927MEDIUM1000 Projects Attendance Tracking Management System check_faculty_login.php sql injectionEPSS 0.6%CVE-2024-10997MEDIUM1000 Projects Bookstore Management System book_list.php sql injectionEPSS 0.5%CVE-2025-0536MEDIUM1000 Projects Attendance Tracking Management System edit_action.php sql injectionEPSS 0.5%CVE-2024-12898MEDIUM1000 Projects Attendance Tracking Management System faculty_action.php sql injectionEPSS 0.5%CVE-2024-12956MEDIUM1000 Projects Portfolio Management System MCA add_achievement_details.php unrestricted uploadEPSS 0.5%CVE-2025-1172MEDIUM1000 Projects Bookstore Management System addtocart.php sql injectionEPSS 0.5%CVE-2025-8173MEDIUM1000 Projects ABC Courier Management System Add_reciver.php sql injectionEPSS 0.5%CVE-2025-3384MEDIUM1000 Projects Human Resource Management System employee.php sql injectionEPSS 0.5%CVE-2024-11101MEDIUM1000 Projects Beauty Parlour Management System search-invoices.php sql injectionEPSS 0.5%CVE-2025-0846MEDIUM1000 Projects Employee Task Management System AdminLogin.php sql injectionEPSS 0.5%CVE-2025-8935MEDIUM1000 Projects Sales Management System custcmp.php sql injectionEPSS 0.5%CVE-2025-8932MEDIUM1000 Projects Sales Management System sales.php sql injectionEPSS 0.5%CVE-2024-12964MEDIUM1000 Projects Daily College Class Work Report Book login.php sql injectionEPSS 0.5%CVE-2025-8241MEDIUM1000 Projects ABC Courier Management System report.php sql injectionEPSS 0.5%