code-projects vulnerabilities

Products

• exam form submission 30
• Blood Bank Management System 28
• patient record management system 28
• simple laundry system 26
• Job Recruitment 25
• online music site 23
• Blood Bank System 22
• inventory management system 21
• online shoe store 21
• Library System 20
• chat system 19
• Pharmacy Management System 19
• E-Commerce Website 18
• Real Estate Property Management System 18
• Simple Online Hotel Reservation System 18
• Simple Pizza Ordering System 18
• Employee Management System 17
• Hostel Management System 16
• Online Appointment Booking System 16
• Simple Food Ordering System 16
• Client Details System 15
• Intern Membership Management System 15
• Online Class and Exam Scheduling System 15
• online restaurant management system 15
• Online Reviewer System 15
• Church Donation System 14
• Simple Admin Panel 14
• hospital management system 13
• Online Bidding System 13
• Online Product Reservation System 13

Latest code-projects CVEs

Newest publication first · page 16 of 40 · showing the latest 1,000

1. CVE-2025-15181 code-projects Refugee Food Management System pagenateRefugeesList.php sql injection

   Published 2025-12-29

   Medium·CVSS 6.9 EPSS 0.39%

   A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the file /home/pagenateRefugeesList.php. Performing manipulation of the argument rfid results in sql injection. Remote exploitation of the attac...

2. CVE-2025-15053 code-projects Student Information System searchresults.php sql injection

   Published 2025-12-24

   Medium·CVSS 6.9 EPSS 0.38%

   A flaw has been found in code-projects Student Information System 1.0. This issue affects some unknown processing of the file /searchresults.php. Executing manipulation of the argument searchbox can lead to sql injection. The attack may be performed from remote. The exploit has b...

3. CVE-2025-15052 code-projects Student Information System profile.php cross site scripting

   Published 2025-12-24

   Medium·CVSS 5.1 EPSS 0.26%

   A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out rem...

4. CVE-2025-15050 code-projects Student File Management System save_file.php unrestricted upload

   Published 2025-12-24

   Medium·CVSS 5.3 EPSS 0.34%

   A security vulnerability has been detected in code-projects Student File Management System 1.0. This affects an unknown part of the file /save_file.php. Such manipulation of the argument File leads to unrestricted upload. The attack can be executed remotely. The exploit has been...

5. CVE-2025-15049 code-projects Online Farm System addProduct.php sql injection

   Published 2025-12-23

   Medium·CVSS 6.9 EPSS 0.38%

   A vulnerability was identified in code-projects Online Farm System 1.0. Affected is an unknown function of the file /addProduct.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might...

6. CVE-2025-15012 code-projects Refugee Food Management System home.php sql injection

   Published 2025-12-22

   Medium·CVSS 6.9 EPSS 0.38%

   A vulnerability was determined in code-projects Refugee Food Management System 1.0. The affected element is an unknown function of the file /home/home.php. This manipulation of the argument a causes sql injection. The attack is possible to be carried out remotely. The exploit has...

7. CVE-2025-15011 code-projects Simple Stock System logout.php sql injection

   Published 2025-12-22

   Medium·CVSS 6.9 EPSS 0.38%

   A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.

8. CVE-2025-14968 code-projects Simple Stock System update.php sql injection

   Published 2025-12-19

   Medium·CVSS 6.9 EPSS 0.39%

   A security flaw has been discovered in code-projects Simple Stock System 1.0. Affected by this issue is some unknown functionality of the file /market/update.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has...

9. CVE-2025-14962 code-projects Simple Stock System chatuser.php cross site scripting

   Published 2025-12-19

   Medium·CVSS 5.3 EPSS 0.33%

   A flaw has been found in code-projects Simple Stock System 1.0. The impacted element is an unknown function of the file /market/chatuser.php. This manipulation causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may b...

10. CVE-2025-14961 code-projects Simple Blood Donor Management System editedcampaign.php sql injection

    Published 2025-12-19

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0. The affected element is an unknown function of the file /editedcampaign.php. The manipulation of the argument campaignname results in sql injection. The attack can be executed remotely. The ex...

11. CVE-2025-14960 code-projects Simple Blood Donor Management System editeddonor.php sql injection

    Published 2025-12-19

    Medium·CVSS 6.9 EPSS 0.38%

    A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0. Impacted is an unknown function of the file /editeddonor.php. The manipulation of the argument Name leads to sql injection. Remote exploitation of the attack is possible. The exp...

12. CVE-2025-14959 code-projects Simple Stock System signup.php sql injection

    Published 2025-12-19

    Medium·CVSS 6.9 EPSS 0.38%

    A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has be...

13. CVE-2025-14951 code-projects Scholars Tracking System home.php sql injection

    Published 2025-12-19

    Medium·CVSS 6.9 EPSS 0.39%

    A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument post_content leads to sql injection. The attack can be executed remotely. The exploit has...

14. CVE-2025-14950 code-projects Scholars Tracking System delete_post.php sql injection

    Published 2025-12-19

    Medium·CVSS 6.9 EPSS 0.39%

    A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /delete_post.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been m...

15. CVE-2025-14940 code-projects Scholars Tracking System delete_user.php sql injection

    Published 2025-12-19

    Medium·CVSS 6.9 EPSS 0.39%

    A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/delete_user.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has...

16. CVE-2025-14939 code-projects Online Appointment Booking System deletemanager.php sql injection

    Published 2025-12-19

    Medium·CVSS 5.1 EPSS 0.32%

    A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has...

17. CVE-2025-14834 code-projects Simple Stock System checkuser.php sql injection

    Published 2025-12-17

    Medium·CVSS 5.3 EPSS 0.35%

    A weakness has been identified in code-projects Simple Stock System 1.0. This affects an unknown function of the file /checkuser.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made availa...

18. CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection

    Published 2025-12-17

    Medium·CVSS 6.9 EPSS 0.36%

    A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated...

19. CVE-2025-14663 code-projects Student File Management System update_student.php cross site scripting

    Published 2025-12-14

    Medium·CVSS 4.8 EPSS 0.24%

    A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/update_student.php. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been pu...

20. CVE-2025-14662 code-projects Student File Management System Update User update_user.php cross site scripting

    Published 2025-12-14

    Medium·CVSS 4.8 EPSS 0.23%

    A vulnerability was found in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php of the component Update User Page. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exp...

21. CVE-2025-14647 code-projects Computer Book Store admin_delete.php sql injection

    Published 2025-12-14

    Medium·CVSS 6.9 EPSS 0.39%

    A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit has been made avail...

22. CVE-2025-14646 code-projects Student File Management System delete_student.php sql injection

    Published 2025-12-14

    Medium·CVSS 6.9 EPSS 0.42%

    A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/delete_student.php. The manipulation of the argument stud_id results in sql injection. The attack may be performed from remote. The exploit...

23. CVE-2025-14645 code-projects Student File Management System delete_user.php sql injection

    Published 2025-12-14

    Medium·CVSS 6.9 EPSS 0.42%

    A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/delete_user.php. The manipulation of the argument user_id leads to sql injection. The attack is possible to be carried out remotely. The exploit...

24. CVE-2025-14643 code-projects Simple Attendance Record System check.php sql injection

    Published 2025-12-14

    Medium·CVSS 6.9 EPSS 0.44%

    A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing manipulation of the argument student results in sql injection. Remote exploitation of the attack is possible. The exploit...

25. CVE-2025-14642 code-projects Computer Laboratory System technical_staff_pic.php unrestricted upload

    Published 2025-12-14

    Medium·CVSS 5.1 EPSS 0.39%

    A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technical_staff_pic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been dis...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.