code-projects vulnerabilities

Products

• exam form submission 30
• Blood Bank Management System 28
• patient record management system 28
• simple laundry system 26
• Job Recruitment 25
• online music site 23
• Blood Bank System 22
• inventory management system 21
• online shoe store 21
• Library System 20
• chat system 19
• Pharmacy Management System 19
• E-Commerce Website 18
• Real Estate Property Management System 18
• Simple Online Hotel Reservation System 18
• Simple Pizza Ordering System 18
• Employee Management System 17
• Hostel Management System 16
• Online Appointment Booking System 16
• Simple Food Ordering System 16
• Client Details System 15
• Intern Membership Management System 15
• Online Class and Exam Scheduling System 15
• online restaurant management system 15
• Online Reviewer System 15
• Church Donation System 14
• Simple Admin Panel 14
• hospital management system 13
• Online Bidding System 13
• Online Product Reservation System 13

Latest code-projects CVEs

Newest publication first · page 10 of 40 · showing the latest 1,000

1. CVE-2026-5540 code-projects Simple Laundry System Parameter modifymember.php sql injection

   Published 2026-04-05

   Medium·CVSS 6.9 EPSS 0.28%

   A vulnerability has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modifymember.php of the component Parameter Handler. Such manipulation of the argument firstName leads to sql injection. The attack can be launched remo...

2. CVE-2026-5539 code-projects Simple Laundry System Parameter modifymember.php cross site scripting

   Published 2026-04-05

   Medium·CVSS 5.3 EPSS 0.29%

   A flaw has been found in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /modifymember.php of the component Parameter Handler. This manipulation of the argument firstName causes cross site scripting. The attack can be initiated remotely. The expl...

3. CVE-2026-5257 code-projects Simple Laundry System Parameter delstaffinfo.php sql injection

   Published 2026-04-01

   Medium·CVSS 6.9 EPSS 0.34%

   A vulnerability has been found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /delstaffinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The attack can be executed remo...

4. CVE-2026-5256 code-projects Simple Laundry System Parameter modify.php sql injection

   Published 2026-04-01

   Medium·CVSS 6.9 EPSS 0.34%

   A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /modify.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is possible. T...

5. CVE-2026-5255 code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting

   Published 2026-04-01

   Medium·CVSS 5.3 EPSS 0.27%

   A vulnerability was detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /delstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in cross site scripting. The attack may be launched remotely. Th...

6. CVE-2026-5240 code-projects BloodBank Managing System admin_state.php cross site scripting

   Published 2026-03-31

   Medium·CVSS 5.3 EPSS 0.34%

   A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. This affects an unknown part of the file /admin_state.php. The manipulation of the argument statename leads to cross site scripting. It is possible to initiate the attack remotely. The expl...

7. CVE-2026-5206 code-projects Simple Gym Management System Payment sql injection

   Published 2026-03-31

   Medium·CVSS 5.3 EPSS 0.20%

   A security vulnerability has been detected in code-projects Simple Gym Management System 1.0. This vulnerability affects unknown code of the component Payment Handler. The manipulation of the argument Payment_id/Amount/customer_id/payment_type/customer_name leads to sql injection...

8. CVE-2026-5198 code-projects Student Membership System Admin Login index.php sql injection

   Published 2026-03-31

   Medium·CVSS 6.9 EPSS 0.36%

   A vulnerability was determined in code-projects Student Membership System 1.0. The impacted element is an unknown function of the file /admin/index.php of the component Admin Login. This manipulation of the argument username/password causes sql injection. Remote exploitation of t...

9. CVE-2026-5197 code-projects Student Membership System delete_user.php sql injection

   Published 2026-03-31

   Medium·CVSS 5.3 EPSS 0.20%

   A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /delete_user.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public...

10. CVE-2026-5196 code-projects Student Membership System delete_member.php sql injection

    Published 2026-03-31

    Medium·CVSS 5.3 EPSS 0.20%

    A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /delete_member.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the p...

11. CVE-2026-5195 code-projects Student Membership System User Registration sql injection

    Published 2026-03-31

    Medium·CVSS 6.9 EPSS 0.26%

    A flaw has been found in code-projects Student Membership System 1.0. This issue affects some unknown processing of the component User Registration Handler. Executing a manipulation can lead to sql injection. The attack can be launched remotely.

12. CVE-2026-5157 code-projects Online Food Ordering System Order order.php cross site scripting

    Published 2026-03-30

    Medium·CVSS 5.3 EPSS 0.34%

    A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php of the component Order Module. Such manipulation of the argument cust_id leads to cross site scripting. The attack may be performed from re...

13. CVE-2026-5150 code-projects Accounting System Parameter viewin_costumer.php sql injection

    Published 2026-03-30

    Medium·CVSS 6.9 EPSS 0.33%

    A security vulnerability has been detected in code-projects Accounting System 1.0. This issue affects some unknown processing of the file /viewin_costumer.php of the component Parameter Handler. Such manipulation of the argument cos_id leads to sql injection. The attack can be la...

14. CVE-2026-5106 code-projects Exam Form Submission update_fst.php cross site scripting

    Published 2026-03-30

    Medium·CVSS 4.8 EPSS 0.20%

    A flaw has been found in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_fst.php. Executing a manipulation of the argument sname can lead to cross site scripting. It is possible to launch the attack remotely. The explo...

15. CVE-2026-5041 code-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection

    Published 2026-03-29

    Medium·CVSS 5.1 EPSS 2.2%

    A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is the function fwrite of the file admin/pageMail.php. The manipulation of the argument mailSubject/mailMessage leads to command injection. The attack may be initiated r...

16. CVE-2026-5035 code-projects Accounting System Parameter view_work.php sql injection

    Published 2026-03-29

    Medium·CVSS 6.9 EPSS 0.40%

    A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /view_work.php of the component Parameter Handler. Such manipulation of the argument en_id leads to sql injection. It is possible to launch the attack remotely. The exp...

17. CVE-2026-5034 code-projects Accounting System Parameter edit_costumer.php sql injection

    Published 2026-03-29

    Medium·CVSS 6.9 EPSS 0.33%

    A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of the file /edit_costumer.php of the component Parameter Handler. This manipulation of the argument cos_id causes sql injection. It is possible to initiate the atta...

18. CVE-2026-5033 code-projects Accounting System Parameter view_costumer.php sql injection

    Published 2026-03-29

    Medium·CVSS 6.9 EPSS 0.35%

    A vulnerability was detected in code-projects Accounting System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_costumer.php of the component Parameter Handler. The manipulation of the argument cos_id results in sql injection. The attack may be p...

19. CVE-2026-5019 code-projects Simple Food Order System Parameter all-orders.php sql injection

    Published 2026-03-28

    Medium·CVSS 6.9 EPSS 0.46%

    A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file all-orders.php of the component Parameter Handler. The manipulation of the argument Status leads to sql injection. The...

20. CVE-2026-5018 code-projects Simple Food Order System Parameter register-router.php sql injection

    Published 2026-03-28

    Medium·CVSS 6.9 EPSS 0.35%

    A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the file register-router.php of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched re...

21. CVE-2026-5017 code-projects Simple Food Order System Parameter all-tickets.php sql injection

    Published 2026-03-28

    Medium·CVSS 6.9 EPSS 0.34%

    A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of the file /all-tickets.php of the component Parameter Handler. Performing a manipulation of the argument Status results in sql injection. The attack can be initia...

22. CVE-2026-4972 code-projects Online Reviewer System btn_functions.php cross site scripting

    Published 2026-03-27

    Medium·CVSS 4.8 EPSS 0.21%

    A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.php. Such manipulation of the argument Description leads to cross site scripting. T...

23. CVE-2026-4970 code-projects Social Networking Site Endpoint delete_photos.php sql injection

    Published 2026-03-27

    Medium·CVSS 5.3 EPSS 0.20%

    A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file delete_photos.php of the component Endpoint. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploi...

24. CVE-2026-4969 code-projects Social Networking Site Alert home.php cross site scripting

    Published 2026-03-27

    Medium·CVSS 5.1 EPSS 0.20%

    A vulnerability was identified in code-projects Social Networking Site 1.0. The impacted element is an unknown function of the file /home.php of the component Alert Handler. The manipulation of the argument content leads to cross site scripting. Remote exploitation of the attack...

25. CVE-2026-4909 code-projects Exam Form Submission update_s7.php cross site scripting

    Published 2026-03-27

    Medium·CVSS 4.8 EPSS 0.29%

    A weakness has been identified in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update_s7.php. This manipulation of the argument sname causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been m...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.