code-projects vulnerabilities

Products

• exam form submission 30
• Blood Bank Management System 28
• patient record management system 28
• simple laundry system 26
• Job Recruitment 25
• online music site 23
• Blood Bank System 22
• inventory management system 21
• online shoe store 21
• Library System 20
• chat system 19
• Pharmacy Management System 19
• E-Commerce Website 18
• Real Estate Property Management System 18
• Simple Online Hotel Reservation System 18
• Simple Pizza Ordering System 18
• Employee Management System 17
• Hostel Management System 16
• Online Appointment Booking System 16
• Simple Food Ordering System 16
• Client Details System 15
• Intern Membership Management System 15
• Online Class and Exam Scheduling System 15
• online restaurant management system 15
• Online Reviewer System 15
• Church Donation System 14
• Simple Admin Panel 14
• hospital management system 13
• Online Bidding System 13
• Online Product Reservation System 13

Latest code-projects CVEs

Newest publication first · page 1 of 40 · showing the latest 1,000

1. CVE-2026-116623 code-projects Simple Content Management System Admin welcome.php authorization

   Published 2026-10-27

   Medium·CVSS 6.9 EPSS 0.39%

   A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be la...

2. CVE-2026-108956 code-projects Online Reviewer System User Update btn_functions.php sql injection

   Published 2026-10-13

   Medium·CVSS 6.9 EPSS 0.26%

   A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to sql injection. The at...

3. CVE-2026-108948 code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes

   Published 2026-10-13

   Medium·CVSS 5.3 EPSS 0.33%

   A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Profile Update Handler. The manipulation of the argument usertype_id...

4. CVE-2026-108938 code-projects Matrimonial System matrimony.sql file access

   Published 2026-10-12

   Medium·CVSS 6.9 EPSS 0.31%

   A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been published and may be used.

5. CVE-2026-108937 code-projects Online Ticket Reservation System medallion.sql file information disclosure

   Published 2026-10-12

   Medium·CVSS 6.9 EPSS 0.33%

   A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation results in file and directory information exposure. It is possible to launch the attack remotely. The...

6. CVE-2026-105188 code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting

   Published 2026-10-05

   Medium·CVSS 5.1 EPSS 0.20%

   A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistory.php of the component Live Event History. The manipulation of the argument eventSubject results in...

7. CVE-2026-105173 code-projects Human Resource Management Event Creation EventStore.php cross site scripting

   Published 2026-10-05

   Medium·CVSS 5.1 EPSS 0.20%

   A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the component Event Creation. Executing a manipulation of the argument eventSubject can lead to cross site scr...

8. CVE-2026-101105 code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection

   Published 2026-09-28

   Medium·CVSS 5.3 EPSS 0.20%

   A vulnerability was determined in code-projects Matrimonial System 1.0. The affected element is the function processprofile_form of the file /create_profile of the component Profile Creation Endpoint. This manipulation of the argument fname causes sql injection. The attack is pos...

9. CVE-2026-93980 code-projects Internship Management System Admin Login Form login.php sql injection

   Published 2026-09-20

   Medium·CVSS 6.9 EPSS 0.43%

   A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be...

10. CVE-2026-93979 code-projects Internship Management System login.php sql injection

    Published 2026-09-20

    Medium·CVSS 6.9 EPSS 0.43%

    A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The...

11. CVE-2026-93978 code-projects Internship Management System login.php sql injection

    Published 2026-09-20

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is pu...

12. CVE-2026-93977 code-projects Assessment Management add-single-mark.php cross site scripting

    Published 2026-09-20

    Medium·CVSS 5.1 EPSS 0.35%

    A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this vulnerability is an unknown functionality of the file lecturer/add-single-mark.php. This manipulation of the argument mark causes cross site scripting. Remote exploitation of the attack is...

13. CVE-2026-93976 code-projects Assessment Management add-user.php cross site scripting

    Published 2026-09-20

    Medium·CVSS 4.8 EPSS 0.37%

    A vulnerability was found in code-projects Assessment Management 1.0. Affected is an unknown function of the file admin/add-user.php. The manipulation of the argument level results in cross site scripting. The attack may be launched remotely. The exploit has been made public and...

14. CVE-2026-93975 code-projects Assessment Management User Editing edit-user.php cross site scripting

    Published 2026-09-20

    Medium·CVSS 4.8 EPSS 0.37%

    A vulnerability has been found in code-projects Assessment Management 1.0. This impacts an unknown function of the file admin/edit-user.php of the component User Editing. The manipulation of the argument name/sname/email/username/password/id leads to cross site scripting. The att...

15. CVE-2026-92926 code-projects Matrimonial System partner_preference.php writepartnerprefs sql injection

    Published 2026-09-17

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be executed remotely. The expl...

16. CVE-2026-92366 code-projects Matrimonial System Regular Search search.php sql injection

    Published 2026-09-16

    Medium·CVSS 6.9 EPSS 0.56%

    A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injectio...

17. CVE-2026-91854 code-projects Record Management System reg.php cross site scripting

    Published 2026-09-15

    Medium·CVSS 5.3 EPSS 0.47%

    A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and...

18. CVE-2026-86519 code-projects Student Crud Operation Backup File card_activation.sql information disclosure

    Published 2026-09-08

    Medium·CVSS 6.9 EPSS 0.53%

    A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has...

19. CVE-2026-86518 code-projects Student Crud Operation edit.php sql injection

    Published 2026-09-08

    Medium·CVSS 5.3 EPSS 0.33%

    A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

20. CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure

    Published 2026-09-07

    Medium·CVSS 6.9 EPSS 0.53%

    A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote e...

21. CVE-2026-86301 code-projects Hospital Information System Patient Management editPatient.php cross site scripting

    Published 2026-09-07

    Medium·CVSS 5.1 EPSS 0.35%

    A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may b...

22. CVE-2026-86217 code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure

    Published 2026-09-06

    Medium·CVSS 6.9 EPSS 0.53%

    A vulnerability was detected in code-projects Hotel and Tourism Reservation in PHP 1.0. Affected is an unknown function of the file /ht/hotel_db%20(1).sql of the component Database Backup Handler. The manipulation results in information disclosure. The attack may be launched remo...

23. CVE-2026-86216 code-projects Hotel and Tourism Reservation in PHP details.php cross site scripting

    Published 2026-09-06

    Medium·CVSS 5.3 EPSS 0.47%

    A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The explo...

24. CVE-2026-86181 code-projects Task Management System User Profile Update UpdateUserProfile.php cross site scripting

    Published 2026-09-06

    Medium·CVSS 5.1 EPSS 0.37%

    A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The at...

25. CVE-2026-86180 code-projects Task Management System In PHP Login index.php sql injection

    Published 2026-09-06

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.