code-projects vulnerabilities

Products

• exam form submission 30
• Blood Bank Management System 28
• patient record management system 28
• simple laundry system 26
• Job Recruitment 25
• online music site 23
• Blood Bank System 22
• inventory management system 21
• online shoe store 21
• Library System 20
• chat system 19
• Pharmacy Management System 19
• E-Commerce Website 18
• Real Estate Property Management System 18
• Simple Online Hotel Reservation System 18
• Simple Pizza Ordering System 18
• Employee Management System 17
• Hostel Management System 16
• Online Appointment Booking System 16
• Simple Food Ordering System 16
• Client Details System 15
• Intern Membership Management System 15
• Online Class and Exam Scheduling System 15
• online restaurant management system 15
• Online Reviewer System 15
• Church Donation System 14
• Simple Admin Panel 14
• hospital management system 13
• Online Bidding System 13
• Online Product Reservation System 13

Latest code-projects CVEs

Newest publication first · page 2 of 40 · showing the latest 1,000

1. CVE-2026-86179 code-projects Daily Expense Manager Database Backup exp_ak.sql information disclosure

   Published 2026-09-06

   Medium·CVSS 6.9 EPSS 0.53%

   A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/exp_ak.sql of the component Database Backup Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the atta...

2. CVE-2026-86168 code-projects Content Management System login.php sql injection

   Published 2026-09-06

   Medium·CVSS 6.9 EPSS 0.43%

   A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument user_name results in sql injection. The attack can be executed remotely. The exploit has been r...

3. CVE-2026-85643 code-projects Online Shopping System adduser.php mysqli_query sql injection

   Published 2026-09-04

   Medium·CVSS 5.1 EPSS 0.35%

   A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqli_query of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

4. CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

   Published 2026-09-04

   Medium·CVSS 6.9 EPSS 0.53%

   A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to...

5. CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

   Published 2026-09-04

   Medium·CVSS 6.9 EPSS 0.43%

   A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The expl...

6. CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection

   Published 2026-09-04

   Medium·CVSS 6.9 EPSS 0.43%

   A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been publi...

7. CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection

   Published 2026-09-04

   Medium·CVSS 6.9 EPSS 0.43%

   A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument doc_id results in sql injection. The attack may be launched remotely. The exploit is now public...

8. CVE-2026-85399 code-projects Hospital Information System PrespController.php getSinglePresp sql injection

   Published 2026-09-04

   Medium·CVSS 6.9 EPSS 0.43%

   A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack ca...

9. CVE-2026-85398 code-projects Hospital Information System viewReq.php viewReq sql injection

   Published 2026-09-04

   Medium·CVSS 6.9 EPSS 0.43%

   A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available...

10. CVE-2026-85397 code-projects Hospital Information System addReq.php findBySearch sql injection

    Published 2026-09-04

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publ...

11. CVE-2026-85225 code-projects Doctor Appointment System patient_login.php sql injection

    Published 2026-09-03

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient_login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly avai...

12. CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection

    Published 2026-08-31

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It is possible to initia...

13. CVE-2026-82700 code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scripting

    Published 2026-08-31

    Medium·CVSS 5.3 EPSS 0.47%

    A vulnerability was found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /offersmail.php of the component Newsletter Subscription. The manipulation of the argument email results in cross site scripting. The atta...

14. CVE-2026-82625 code-projects Simple Inventory System User Registration register.php cross site scripting

    Published 2026-08-31

    Medium·CVSS 5.3 EPSS 0.47%

    A vulnerability has been found in code-projects Simple Inventory System 1.0. This affects an unknown part of the file /register.php of the component User Registration. Such manipulation of the argument last_name leads to cross site scripting. The attack may be launched remotely....

15. CVE-2026-82624 code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure

    Published 2026-08-31

    Medium·CVSS 6.9 EPSS 0.53%

    A flaw has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file inventorymanagement.sql of the component Database Backup File Handler. This manipulation causes information disclosure. The attack may be initiated...

16. CVE-2026-82622 code-projects Employee Leave Managing System Employee Profile Update editaction.php cross site scripting

    Published 2026-08-31

    Medium·CVSS 5.1 EPSS 0.35%

    A security vulnerability has been detected in code-projects Employee Leave Managing System 1.0. Affected is an unknown function of the file /EmpManageSys/editaction.php of the component Employee Profile Update. The manipulation of the argument Name leads to cross site scripting....

17. CVE-2026-79845 code-projects Simple Inventory System edit.php sql injection

    Published 2026-08-25

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of the file /InventoryManagement/edit.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The explo...

18. CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting

    Published 2026-08-25

    Medium·CVSS 5.3 EPSS 0.47%

    A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sumit_form.php. Such manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely....

19. CVE-2026-78144 code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization

    Published 2026-08-23

    Medium·CVSS 5.3 EPSS 0.38%

    A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to author...

20. CVE-2026-78143 code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

    Published 2026-08-23

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote explo...

21. CVE-2026-78142 code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization

    Published 2026-08-23

    Medium·CVSS 5.3 EPSS 0.38%

    A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Restore/Delete. The manipulation of the argument resident_id results in authorization bypass. The atta...

22. CVE-2026-76990 code-projects Simple Inventory System delete.php sql injection

    Published 2026-08-20

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclo...

23. CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access

    Published 2026-08-20

    Medium·CVSS 6.9 EPSS 0.53%

    A weakness has been identified in code-projects Login Registration System 1.0. This affects an unknown function of the file /loginsystem/database/login_registration_system.sql of the component SQL Database Backup Handler. This manipulation causes files or directories accessible....

24. CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

    Published 2026-08-20

    Medium·CVSS 6.9 EPSS 0.43%

    A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote exploitation of the a...

25. CVE-2026-76762 code-projects Assessment Management welcome.php sql injection

    Published 2026-08-19

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit is now public and may...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.