Vulnerabilidades de Code-projects
CVEs publicadas que afetam produtos de Code-projects: 561 registro(s), com severidade, exploração e correções.
Online Music Site 23Simple Laundry System 21Employee Management System 17Simple Food Ordering System 16Online Reviewer System 15E-Commerce Website 13Online Product Reservation System 13Student File Management System 13Vehicle Showroom Management System 12Refugee Food Management System 12Assessment Management 10Simple IT Discussion Forum 10Online Shopping System 10Simple Flight Ticket Booking System 10Real State Services 9Exam Form Submission 8Intern Membership Management System 8Student Information System 8Invoice System in Laravel 7Client Details System 7Task Management System 7Content Management System 6Online Food Ordering System 6Online Hospital Management System 6Accounting System 6Simple Stock System 6Nero Social Networking Site 6Responsive Hotel Site 6Online Event Judging System 6Simple Scheduling System 6Hospital Information System 6Hotel and Tourism Reservation 6Employee Profile Management System 5Online Examination System 5Courier Management System 5Online Complaint Site 5Internship Management System 5Online Job Portal 5Patient Record Management System 4Student Membership System 4
CVE-2026-3744
Crítica · 9.8
CWE-89 08/03/2026
code-projects Student Web Portal signup.php valreg_passwdation sql injection
A vulnerability has been found in code-projects Student Web Portal 1.0. This impacts the function valreg_passwdation of the file signup.php. The manipulation of the argument reg_passwd leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-3736
Crítica · 9.8
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this issue is some unknown functionality of the file SearchResultRoundtrip.php. Performing a manipulation of the argument from results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used.
CVE-2026-3735
Crítica · 9.8
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection
A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file SearchResultOneway.php. Such manipulation of the argument from leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-3723
Crítica · 9.8
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System Admindelete.php sql injection
A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /Admindelete.php. The manipulation of the argument flightno results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
CVE-2026-3711
Alta · 7.2
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection
A vulnerability was detected in code-projects Simple Flight Ticket Booking System 1.0. Affected is an unknown function of the file /Adminupdate.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
CVE-2026-3710
Alta · 7.2
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System Adminadd.php sql injection
A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0. This impacts an unknown function of the file /Adminadd.php. The manipulation of the argument flightno/airplaneid/departure/dtime/arrival/atime/ec/ep/bc/bp leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVE-2026-3709
Crítica · 9.8
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System register.php sql injection
A weakness has been identified in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown function of the file /register.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-3708
Crítica · 9.8
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System login.php sql injection
A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0. The impacted element is an unknown function of the file /login.php. Performing a manipulation of the argument Username results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-3705
Crítica · 9.8
CWE-89 08/03/2026
code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection
A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. This issue affects some unknown processing of the file /Adminsearch.php. The manipulation of the argument flightno results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVE-2026-2912
Crítica · 9.8
CWE-89 22/02/2026
code-projects Online Reviewer System studentresult-view.php sql injection
A vulnerability was found in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/students/assessments/results/studentresult-view.php. The manipulation of the argument test_id results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
CVE-2026-2706
Alta · 7.5
CWE-74 19/02/2026
code-projects Patient Record Management System fecalysis_not.php sql injection
A flaw has been found in code-projects Patient Record Management System 1.0. This affects an unknown function of the file /fecalysis_not.php. This manipulation of the argument comp_id causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2026-2224
Média · 5.4
CWE-79 09/02/2026
code-projects Online Reviewer System btn_functions.php cross site scripting
A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /system/system/admins/manage/users/btn_functions.php. The manipulation of the argument firstname results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVE-2026-2223
Crítica · 9.8
CWE-89 09/02/2026
Injeção de SQL (CWE-89) no code-projects Online Reviewer System 1.0
Foi detectada uma vulnerabilidade de segurança no code-projects Online Reviewer System 1.0. O problema afeta uma funcionalidade não especificada do arquivo /system/system/students/assessments/pretest/take/index.php. A manipulação do argumento ID leva a injeção de SQL. É possível iniciar o ataque remotamente. O exploit foi divulgado publicamente e pode ser utilizado.
CVE-2026-2222
Média · 4.8
CWE-79 09/02/2026
code-projects Online Reviewer System btn_functions.php cross site scripting
A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown functionality of the file /system/system/admins/manage/users/btn_functions.php. Executing a manipulation of the argument firstname can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVE-2026-2221
Crítica · 9.8
CWE-89 09/02/2026
Injeção de SQL no login do code-projects Online Reviewer System
Foi identificada uma falha de segurança no Online Reviewer System 1.0 da code-projects. Afetada está uma função desconhecida do arquivo /login/index.php do componente Login. A realização de uma manipulação do argumento Username resulta em injeção de SQL. O ataque pode ser realizado remotamente. O exploit foi divulgado publicamente e pode ser usado em ataques.
CVE-2026-2220
Crítica · 9.8
CWE-89 09/02/2026
code-projects Online Reviewer System 1.0: injeção de SQL via difficulty_id
Foi identificada uma vulnerabilidade no code-projects Online Reviewer System 1.0. Ela afeta uma função desconhecida do arquivo /system/system/admins/assessments/pretest/btn_functions.php. A manipulação do argumento difficulty_id leva a injeção de SQL. O ataque pode ser executado remotamente. O exploit está publicamente disponível e pode ser utilizado.
CVE-2026-2214
Média · 4.8
CWE-79 09/02/2026
code-projects for Plugin AdminAddAlbum.php cross site scripting
A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/PHP/AdminAddAlbum.php. This manipulation of the argument txtalbum causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-2213
Alta · 7.2
CWE-284 09/02/2026
code-projects Online Music Site AdminAddAlbum.php unrestricted upload
A security flaw has been discovered in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminAddAlbum.php. The manipulation of the argument txtimage results in unrestricted upload. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
CVE-2026-2212
Crítica · 9.8
CWE-89 09/02/2026
Injeção de SQL no Online Music Site 1.0 da code-projects
Foi identificada uma vulnerabilidade no code-projects Online Music Site 1.0. Afeta essa vulnerabilidade uma funcionalidade desconhecida do arquivo /Administrator/PHP/AdminEditCategory.php. A manipulação do argumento ID leva a injeção de SQL. O ataque pode ser realizado remotamente. O exploit está publicamente disponível e pode ser utilizado.
CVE-2026-2211
Crítica · 9.8
CWE-89 09/02/2026
Injeção de SQL no code-projects Online Music Site
Foi identificada uma vulnerabilidade no code-projects Online Music Site 1.0. Afetada está uma função desconhecida do arquivo /Administrator/PHP/AdminDeleteCategory.php. A manipulação do argumento ID pode levar a injeção de SQL. O ataque pode ser executado remotamente. O exploit foi divulgado publicamente e pode ser utilizado.
CVE-2026-2199
Crítica · 9.8
CWE-89 08/02/2026
Injeção de SQL no Online Reviewer System 1.0 da code-projects em user-delete.php
Foi identificada uma falha de segurança no code-projects Online Reviewer System 1.0. O elemento afetado é uma função desconhecida do arquivo /reviewer/system/system/admins/manage/users/user-delete.php. A manipulação do argumento ID resulta em injeção de SQL. O ataque pode ser iniciado remotamente. O exploit foi divulgado ao público e pode ser usado em ataques.
CVE-2026-2198
Crítica · 9.8
CWE-89 08/02/2026
Injeção de SQL no Online Reviewer System 1.0 da code-projects em loaddata.php (CVE-2026-2198)
Foi identificada uma vulnerabilidade no code-projects Online Reviewer System 1.0. O elemento afetado é uma função desconhecida do arquivo /system/system/admins/assessments/pretest/loaddata.php. Essa manipulação do argumento difficulty_id leva a uma injeção de SQL. É possível lançar o ataque remotamente. O exploit está publicamente disponível e pode ser usado.
CVE-2026-2197
Crítica · 9.8
CWE-89 08/02/2026
Injeção de SQL no Online Reviewer System 1.0 da code-projects (CVE-2026-2197)
Foi identificada uma vulnerabilidade no code-projects Online Reviewer System 1.0. É afetada uma função desconhecida do arquivo /system/system/admins/assessments/pretest/exam-delete.php. A manipulação do argumento test_id causa injeção de SQL. É possível iniciar o ataque remotamente. O exploit foi divulgado publicamente e pode ser utilizado.
CVE-2026-2196
Crítica · 9.8
CWE-89 08/02/2026
Injeção de SQL no Online Reviewer System 1.0 via test_id (CVE-2026-2196)
Foi identificada uma vulnerabilidade no Online Reviewer System 1.0 da code-projects. Isso afeta algum processamento não especificado do arquivo /system/system/admins/assessments/pretest/exam-update.php. A manipulação do argumento test_id resulta em injeção de SQL. O ataque pode ser realizado remotamente. O exploit foi tornado público e pode ser utilizado.
CVE-2026-2195
Crítica · 9.8
CWE-89 08/02/2026
Injeção de SQL no Online Reviewer System 1.0 da code-projects
Foi identificada uma vulnerabilidade no Online Reviewer System 1.0 da code-projects. Ela afeta código desconhecido do arquivo /system/system/admins/assessments/pretest/questions-view.php. A manipulação do argumento ID leva a injeção de SQL. O ataque pode ser realizado remotamente. O exploit foi divulgado publicamente e pode ser utilizado.