code-projects vulnerabilities

Products

• exam form submission 30
• Blood Bank Management System 28
• patient record management system 28
• simple laundry system 26
• Job Recruitment 25
• online music site 23
• Blood Bank System 22
• inventory management system 21
• online shoe store 21
• Library System 20
• chat system 19
• Pharmacy Management System 19
• E-Commerce Website 18
• Real Estate Property Management System 18
• Simple Online Hotel Reservation System 18
• Simple Pizza Ordering System 18
• Employee Management System 17
• Hostel Management System 16
• Online Appointment Booking System 16
• Simple Food Ordering System 16
• Client Details System 15
• Intern Membership Management System 15
• Online Class and Exam Scheduling System 15
• online restaurant management system 15
• Online Reviewer System 15
• Church Donation System 14
• Simple Admin Panel 14
• hospital management system 13
• Online Bidding System 13
• Online Product Reservation System 13

Latest code-projects CVEs

Newest publication first · page 11 of 40 · showing the latest 1,000

1. CVE-2026-4908 code-projects Simple Laundry System Parameter modstaffinfo.php sql injection

   Published 2026-03-27

   Medium·CVSS 6.9 EPSS 0.40%

   A security flaw has been discovered in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /modstaffinfo.php of the component Parameter Handler. The manipulation of the argument userid results in sql injection. The attack may be performed from re...

2. CVE-2026-4900 code-projects Online Food Ordering System localhost.sql privilege escalation

   Published 2026-03-26

   Medium·CVSS 6.9 EPSS 0.45%

   A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file /dbfood/localhost.sql. This manipulation causes files or directories accessible. The attack can be initiated remotely. The exploit has been made available to...

3. CVE-2026-4899 code-projects Online Food Ordering System food.php cross site scripting

   Published 2026-03-26

   Medium·CVSS 4.8 EPSS 0.31%

   A security flaw has been discovered in code-projects Online Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /dbfood/food.php. The manipulation of the argument cuisines results in cross site scripting. It is possible to launch the attack...

4. CVE-2026-4898 code-projects Online Food Ordering System contact.php cross site scripting

   Published 2026-03-26

   Medium·CVSS 5.3 EPSS 0.36%

   A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /dbfood/contact.php. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack...

5. CVE-2026-4850 code-projects Simple Laundry System Parameter checkregisitem.php sql injection

   Published 2026-03-26

   Medium·CVSS 6.9 EPSS 0.36%

   A security flaw has been discovered in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /checkregisitem.php of the component Parameter Handler. The manipulation of the argument Long-arm-shirtVol results in sql injection. The attack may be launc...

6. CVE-2026-4849 code-projects Simple Laundry System Parameter modify.php cross site scripting

   Published 2026-03-26

   Medium·CVSS 5.3 EPSS 0.28%

   A vulnerability was identified in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /modify.php of the component Parameter Handler. The manipulation of the argument firstName leads to cross site scripting. The attack may be initiated remotely....

7. CVE-2026-4844 code-projects Online Food Ordering System Admin Login admin.php sql injection

   Published 2026-03-26

   Medium·CVSS 6.9 EPSS 0.34%

   A vulnerability was detected in code-projects Online Food Ordering System 1.0. This issue affects some unknown processing of the file /admin.php of the component Admin Login Module. The manipulation of the argument Username results in sql injection. The attack may be performed fr...

8. CVE-2026-4841 code-projects Online Food Ordering System Shopping Cart cart.php sql injection

   Published 2026-03-26

   Medium·CVSS 6.9 EPSS 0.27%

   A weakness has been identified in code-projects Online Food Ordering System 1.0. This affects an unknown part of the file form/cart.php of the component Shopping Cart Module. Executing a manipulation of the argument del can lead to sql injection. The attack can be executed remote...

9. CVE-2026-4836 code-projects Accounting System delete.php sql injection

   Published 2026-03-26

   Medium·CVSS 5.3 EPSS 0.20%

   A vulnerability was detected in code-projects Accounting System 1.0. The affected element is an unknown function of the file /my_account/delete.php. Performing a manipulation of the argument cos_id results in sql injection. It is possible to initiate the attack remotely. The expl...

10. CVE-2026-4835 code-projects Accounting System Web Application add_costumer.php cross site scripting

    Published 2026-03-26

    Medium·CVSS 5.1 EPSS 0.20%

    A security vulnerability has been detected in code-projects Accounting System 1.0. Impacted is an unknown function of the file /my_account/add_costumer.php of the component Web Application Interface. Such manipulation of the argument costumer_name leads to cross site scripting. T...

11. CVE-2026-4784 code-projects Simple Laundry System Parameter checkcheckout.php sql injection

    Published 2026-03-25

    Medium·CVSS 6.9 EPSS 0.35%

    A vulnerability was found in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /checkcheckout.php of the component Parameter Handler. The manipulation of the argument serviceId results in sql injection. It is possible to launch the attack remot...

12. CVE-2026-4595 code-projects Exam Form Submission update_s6.php cross site scripting

    Published 2026-03-23

    Medium·CVSS 4.8 EPSS 0.21%

    A vulnerability was determined in code-projects Exam Form Submission 1.0. This vulnerability affects unknown code of the file /admin/update_s6.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack can be launched remotely. The exploit ha...

13. CVE-2026-4581 code-projects Simple Laundry System Parameters checklogin.php sql injection

    Published 2026-03-23

    Medium·CVSS 6.9 EPSS 0.38%

    A weakness has been identified in code-projects Simple Laundry System 1.0. Affected is an unknown function of the file /checklogin.php of the component Parameters Handler. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out re...

14. CVE-2026-4580 code-projects Simple Laundry System Parameters checkupdatestatus.php sql injection

    Published 2026-03-23

    Medium·CVSS 6.9 EPSS 0.34%

    A security flaw has been discovered in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /checkupdatestatus.php of the component Parameters Handler. The manipulation of the argument serviceId results in sql injection. The attack can be executed...

15. CVE-2026-4579 code-projects Simple Laundry System Parameters viewdetail.php sql injection

    Published 2026-03-23

    Medium·CVSS 6.9 EPSS 0.45%

    A vulnerability was identified in code-projects Simple Laundry System 1.0. This affects an unknown function of the file /viewdetail.php of the component Parameters Handler. The manipulation of the argument serviceId leads to sql injection. Remote exploitation of the attack is pos...

16. CVE-2026-4578 code-projects Exam Form Submission update_s3.php cross site scripting

    Published 2026-03-23

    Medium·CVSS 4.8 EPSS 0.28%

    A vulnerability was determined in code-projects Exam Form Submission 1.0. The impacted element is an unknown function of the file /admin/update_s3.php. Executing a manipulation of the argument sname can lead to cross site scripting. The attack may be launched remotely. The exploi...

17. CVE-2026-4577 code-projects Exam Form Submission update_s4.php cross site scripting

    Published 2026-03-23

    Medium·CVSS 4.8 EPSS 0.22%

    A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/update_s4.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit ha...

18. CVE-2026-4576 code-projects Exam Form Submission update_s5.php cross site scripting

    Published 2026-03-23

    Medium·CVSS 4.8 EPSS 0.21%

    A vulnerability has been found in code-projects Exam Form Submission 1.0. Impacted is an unknown function of the file /admin/update_s5.php. Such manipulation of the argument sname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed t...

19. CVE-2026-4575 code-projects Exam Form Submission update_s2.php cross site scripting

    Published 2026-03-23

    Medium·CVSS 4.8 EPSS 0.21%

    A flaw has been found in code-projects Exam Form Submission 1.0. This issue affects some unknown processing of the file /admin/update_s2.php. This manipulation of the argument sname causes cross site scripting. The attack can be initiated remotely. The exploit has been published...

20. CVE-2026-4557 code-projects Exam Form Submission update_s1.php cross site scripting

    Published 2026-03-22

    Medium·CVSS 5.3 EPSS 0.28%

    A vulnerability was detected in code-projects Exam Form Submission 1.0. This impacts an unknown function of the file /admin/update_s1.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit is now pub...

21. CVE-2026-4550 code-projects Simple Gym Management System func.php sql injection

    Published 2026-03-22

    Medium·CVSS 5.1 EPSS 0.28%

    A vulnerability has been found in code-projects Simple Gym Management System up to 1.0. This affects an unknown part of the file /gym/func.php. Such manipulation of the argument Trainer_id/fname leads to sql injection. The attack can be executed remotely. The exploit has been dis...

22. CVE-2026-4533 code-projects Simple Food Ordering System all-tickets.php sql injection

    Published 2026-03-22

    Medium·CVSS 5.3 EPSS 0.31%

    A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the attack remotely. The exp...

23. CVE-2026-4532 code-projects Simple Food Ordering System Database Backup food.sql file access

    Published 2026-03-22

    Medium·CVSS 6.9 EPSS 0.47%

    A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to files or directories ac...

24. CVE-2026-4319 code-projects Simple Food Order System add-item.php sql injection

    Published 2026-03-17

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was identified in code-projects Simple Food Order System 1.0. Affected by this vulnerability is an unknown functionality of the file /routers/add-item.php. Such manipulation of the argument price leads to sql injection. The attack can be launched remotely. The exp...

25. CVE-2026-3763 code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting

    Published 2026-03-08

    Medium·CVSS 5.3 EPSS 0.36%

    A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. The affected element is an unknown function of the file showhistory.php. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.