Projectworlds Asset Management System vulnerabilities

2 CVEs affecting Projectworlds Asset Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-43014, published 2023-09-28.

More from Projectworlds.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-43013, published 2023-09-28. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of…
• CVE-2023-43014, published 2023-09-28. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authenticated attacker to…