Vulnerabilidades de Code-projects

CVEs publicadas que afetam produtos de Code-projects: 472 registro(s), com severidade, exploração e correções.

Online Music Site 23 Simple Laundry System 21 Employee Management System 16 Simple Food Ordering System 16 Online Reviewer System 15 E-Commerce Website 13 Online Product Reservation System 13 Student File Management System 13 Vehicle Showroom Management System 12 Refugee Food Management System 12 Simple IT Discussion Forum 10 Simple Flight Ticket Booking System 10 Exam Form Submission 8 Intern Membership Management System 8 Student Information System 8 Invoice System in Laravel 7 Client Details System 7 Online Food Ordering System 6 Online Hospital Management System 6 Accounting System 6 Nero Social Networking Site 6 Responsive Hotel Site 6 Online Event Judging System 6 Simple Scheduling System 6 Simple Stock System 6 Employee Profile Management System 5 Content Management System 5 Courier Management System 5 Online Complaint Site 5 Patient Record Management System 4 Student Membership System 4 Easy Blog Site 4 Online Shoe Store 4 Hotel and Tourism Reservation System 4 Online Examination System 4 Simple Food Order System 4 Online Lot Reservation System 4 Simple Online Hotel Reservation System 4 Online Bidding System 4 Online Job Search Engine 4

Somente exploradas (KEV) →

CVE-2026-108956 Alta · 7.3 CWE-74 12/10/2026

code-projects Online Reviewer System User Update btn_functions.php sql injection

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

CVE-2026-108948 Média · 5.4 CWE-913 12/10/2026

code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes

A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. The manipulation of the argument usertype_id leads to dynamically-determined object attributes. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-108938 Média · 5.3 CWE-425 12/10/2026

code-projects Matrimonial System matrimony.sql file access

A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.

CVE-2026-108937 Média · 5.3 CWE-200 12/10/2026

code-projects Online Ticket Reservation System medallion.sql file information disclosure

A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The exploit is now public and may be used.

CVE-2026-105188 Baixa · 3.5 CWE-79 05/10/2026

code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting

A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.

CVE-2026-105173 Baixa · 3.5 CWE-79 04/10/2026

code-projects Human Resource Management Event Creation EventStore.php cross site scripting

A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.

CVE-2026-78144 Média · 6.3 CWE-285 23/08/2026

code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.

CVE-2026-78143 Alta · 7.3 CWE-74 23/08/2026

code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

CVE-2026-78142 Média · 6.3 CWE-285 23/08/2026

code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Restore/Delete. The manipulation of the argument resident_id results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.

CVE-2026-13567 Média · 4.3 CWE-79 29/06/2026

code-projects Online Music Site POST Request Feedback.php cross site scripting

A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-13559 Alta · 7.3 CWE-74 29/06/2026

code-projects Real State Services single-list_sale.php add sql injection

A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-13504 Baixa · 3.5 CWE-79 28/06/2026

code-projects Project Management System Mail Compose mail.php cross site scripting

A vulnerability has been found in code-projects Project Management System 1.0. This vulnerability affects unknown code of the file /mail.php of the component Mail Compose Page. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

CVE-2026-11490 Alta · 7.3 CWE-74 08/06/2026

code-projects Online Music Site Search.php sql injection

A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2026-11489 Alta · 7.3 CWE-74 08/06/2026

code-projects Online Music Site AdminDeleteAlbum.php sql injection

A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminDeleteAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

CVE-2026-11488 Alta · 7.3 CWE-74 08/06/2026

code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection

A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown part of the file checkUser.php of the component POST Parameter Handler. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-11344 Alta · 7.3 CWE-284 05/06/2026

code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload

A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used.

CVE-2026-11342 Alta · 7.3 CWE-74 05/06/2026

code-projects Hotel and Tourism Reservation System details.php sql injection

A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-10620 Alta · 7.3 CWE-74 02/06/2026

code-projects Student Admission System index.php sql injection

A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

CVE-2026-10299 Baixa · 3.8 CWE-99 01/06/2026

code-projects Online Hospital Management System viewdoctortimings.php resource injection

A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. This manipulation of the argument delid causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-10290 Alta · 7.3 CWE-74 01/06/2026

code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

CVE-2026-10289 Média · 4.3 CWE-79 01/06/2026

code-projects Hotel and Tourism Reservation System tour.php cross site scripting

A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name /email /people /number results in cross site scripting. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

CVE-2026-10288 Alta · 7.3 CWE-287 01/06/2026

code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper authentication. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVE-2026-10262 Alta · 7.3 CWE-74 01/06/2026

code-projects Real State Services Login loginuser.php sql injection

A vulnerability has been found in code-projects Real State Services 1.0. This impacts an unknown function of the file /loginuser.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-10243 Alta · 7.3 CWE-287 01/06/2026

code-projects Smart Parking System Admin Endpoint missing authentication

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.

CVE-2026-10209 Média · 6.3 CWE-74 31/05/2026

code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection

A vulnerability has been found in code-projects Online Hospital Management System 1.0. Affected is an unknown function of the file appointmentdetail.php of the component Appointment Handler. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.