Vulnerabilidades de Fabian
CVEs publicadas que afetam produtos de Fabian: 211 registro(s), com severidade, exploração e correções.
Online Music Site 18Simple Food Ordering System 13Student File Management System 13Online Product Reservation System 13Online Reviewer System 12Refugee Food Management System 12E-commerce Website 12Student Information System 8Client Details System 7Simple Scheduling System 6Online Complaint Site 6Online Hotel Reservation System 6Nero Social Networking Site 6Responsive Hotel Site 6Scholars Tracking System 5Online Examination System 4Mobile Shop Management System 4Online Bidding System 4Currency Exchange System 4Simple Cafe Ordering System 4Simple Online Hotel Reservation System 4Online Job Search Engine 4Automated Voting System 3Simple Shopping Cart 3Online Ordering System 3Project Monitoring System 3Voting System 3Simple E-banking System 3Simple Blood Donor Management System 3Contact Management System 2Online Student Management System 2Online Course Registration Site 2Web-based Inventory And Pos System 2Class And Exam Timetable Management System 2Blog Site 2Chamber Of Commerce Membership Management System 1Student Transcript Processing System 1Simple Attendance Record System 1Hospital Management System 1E-commerce Site 1
CVE-2026-2132
Crítica · 9.8
CWE-89 08/02/2026
Injeção de SQL no code-projects Online Music Site 1.0 (CVE-2026-2132)
Uma falha de segurança foi descoberta no code-projects Online Music Site 1.0. Este problema afeta um processamento desconhecido do arquivo /Administrator/PHP/AdminUpdateCategory.php. A manipulação do argumento txtcat resulta em injeção de SQL. O ataque pode ser executado remotamente. O exploit foi divulgado publicamente e pode ser usado em ataques.
CVE-2026-2060
Crítica · 9.8
CWE-89 06/02/2026
Injeção de SQL no Simple Blood Donor Management System 1.0 (CVE-2026-2060)
Foi identificada uma vulnerabilidade no code-projects Simple Blood Donor Management System 1.0. Afetada por esta vulnerabilidade está uma funcionalidade desconhecida do arquivo /simpleblooddonor/editcampaignform.php. A realização de uma manipulação do argumento ID resulta em injeção de SQL. É possível iniciar o ataque remotamente. O exploit foi tornado público e pode ser utilizado.
CVE-2026-1535
Crítica · 9.8
CWE-74 28/01/2026
Injeção de SQL no Online Music Site da code-projects em AdminReply.php
Foi detectada uma vulnerabilidade de segurança no Online Music Site 1.0 da code-projects. Ela afeta uma função não identificada do arquivo /Administrator/PHP/AdminReply.php. A manipulação do argumento ID leva a injeção de SQL. É possível realizar o ataque remotamente. O exploit foi divulgado publicamente e pode ser utilizado.
CVE-2026-1534
Crítica · 9.8
CWE-74 28/01/2026
Injeção de SQL no Online Music Site 1.0 em AdminEditUser.php
Foi identificada uma fraqueza no code-projects Online Music Site 1.0. Isto afeta uma função não identificada do arquivo /Administrator/PHP/AdminEditUser.php. Esta manipulação do argumento ID causa injeção de SQL. É possível iniciar o ataque remotamente. O exploit foi disponibilizado ao público e pode ser usado em ataques.
CVE-2026-1533
Crítica · 9.8
CWE-89 28/01/2026
Injeção de SQL no Online Music Site 1.0 da code-projects em AdminAddCategory.php
Foi descoberta uma falha de segurança no code-projects Online Music Site 1.0. O elemento afetado é uma função desconhecida do arquivo /Administrator/PHP/AdminAddCategory.php. A manipulação resulta em injeção de SQL. O ataque pode ser realizado remotamente. O exploit foi divulgado publicamente e pode ser usado em ataques.
CVE-2025-69564
Crítica · 9.8
CWE-94 27/01/2026
Injeção de SQL no ExAddNewUser.php do Mobile Shop Management System da code-projects (CVE-2025-69564)
code-projects Mobile Shop Management System 1.0 é vulnerável a injeção de SQL em /ExAddNewUser.php por meio dos parâmetros Name, Address, email, UserName, Password, confirm_password, Role, Branch e Activate.
CVE-2025-69563
Crítica · 9.8
CWE-89 27/01/2026
Injeção de SQL em ExLogin.php no Mobile Shop Management System da code-projects
code-projects Mobile Shop Management System 1.0 é vulnerável a SQL Injection em /ExLogin.php por meio do parâmetro Password.
CVE-2025-69562
Crítica · 9.8
CWE-89 27/01/2026
Injeção de SQL no code-projects Mobile Shop Management System 1.0 via parâmetro userid
O code-projects Mobile Shop Management System 1.0 é vulnerável a injeção de SQL no arquivo /insertmessage.php por meio do parâmetro userid.
CVE-2025-69565
Crítica · 9.8
CWE-434 27/01/2026
Upload de arquivo sem restrição no code-projects Mobile Shop Management System 1.0
O code-projects Mobile Shop Management System 1.0 é vulnerável a upload de arquivo em /ExAddProduct.php.
CVE-2026-1443
Crítica · 9.8
CWE-89 26/01/2026
code-projects Online Music Site AdminDeleteUser.php sql injection
A flaw has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminDeleteUser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2026-1423
Crítica · 9.8
CWE-284 26/01/2026
code-projects Online Examination System admin_pic.php unrestricted upload
A vulnerability was determined in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file /admin_pic.php. Executing a manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
CVE-2026-1422
Crítica · 9.8
CWE-89 26/01/2026
code-projects Online Examination System Login Page index.php sql injection
A vulnerability was found in code-projects Online Examination System 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login Page. Performing a manipulation of the argument User results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
CVE-2026-1421
Média · 5.4
CWE-79 26/01/2026
code-projects Online Examination System Add Pages cross site scripting
A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-0852
Crítica · 9.8
CWE-74 11/01/2026
code-projects Online Music Site AdminUpdateUser.php sql injection
A security flaw has been discovered in code-projects Online Music Site 1.0. The impacted element is an unknown function of the file /Administrator/PHP/AdminUpdateUser.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-0851
Crítica · 9.8
CWE-74 11/01/2026
code-projects Online Music Site AdminAddUser.php sql injection
A vulnerability was identified in code-projects Online Music Site 1.0. The affected element is an unknown function of the file /Administrator/PHP/AdminAddUser.php. The manipulation of the argument txtusername leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
CVE-2026-0607
Crítica · 9.8
CWE-89 05/01/2026
code-projects Online Music Site AdminViewSongs.php sql injection
A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminViewSongs.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVE-2026-0606
Crítica · 9.8
CWE-89 05/01/2026
code-projects Online Music Site Albums.php sql injection
A vulnerability was detected in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /FrontEnd/Albums.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVE-2026-0605
Crítica · 9.8
CWE-89 05/01/2026
code-projects Online Music Site login.php sql injection
A security vulnerability has been detected in code-projects Online Music Site 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. Such manipulation of the argument username/password leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVE-2026-0592
Crítica · 9.8
CWE-74 05/01/2026
code-projects Online Product Reservation System User Registration register_code.php sql injection
A security flaw has been discovered in code-projects Online Product Reservation System 1.0. This affects an unknown function of the file /handgunner-administrator/register_code.php of the component User Registration Handler. Performing a manipulation of the argument fname/lname/address/city/province/country/zip/tel_no/email/username results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-0591
Crítica · 9.8
CWE-74 05/01/2026
code-projects Online Product Reservation System Cart Update update.php sql injection
A vulnerability was identified in code-projects Online Product Reservation System 1.0. The impacted element is an unknown function of the file /app/checkout/update.php of the component Cart Update Handler. Such manipulation of the argument id/qty leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
CVE-2026-0590
Crítica · 9.8
CWE-74 05/01/2026
code-projects Online Product Reservation System POST Parameter delete.php sql injection
A vulnerability was determined in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file /app/checkout/delete.php of the component POST Parameter Handler. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-0589
Alta · 7.3
CWE-287 05/01/2026
code-projects Online Product Reservation System Administration Backend improper authentication
A vulnerability was found in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the component Administration Backend. The manipulation results in improper authentication. The attack may be performed from remote. The exploit has been made public and could be used.
CVE-2026-0586
Média · 6.1
CWE-79 05/01/2026
code-projects Online Product Reservation System prod.php cross site scripting
A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2026-0585
Crítica · 9.8
CWE-74 05/01/2026
code-projects Online Product Reservation System GET Parameter order_view.php sql injection
A security vulnerability has been detected in code-projects Online Product Reservation System 1.0. Impacted is an unknown function of the file /order_view.php of the component GET Parameter Handler. Such manipulation of the argument transaction_id leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-0584
Crítica · 9.8
CWE-74 05/01/2026
code-projects Online Product Reservation System left_cart.php sql injection
A weakness has been identified in code-projects Online Product Reservation System 1.0. This issue affects some unknown processing of the file app/products/left_cart.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.