A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/voters_add.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed remotely....
Vendor
code-projects vulnerabilities
1,482 published CVES affecting code-projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,482
- Critical
- 73
- High
- 38
- Medium
- 1,370
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- exam form submission 30
- Blood Bank Management System 28
- patient record management system 28
- simple laundry system 26
- Job Recruitment 25
- online music site 23
- Blood Bank System 22
- inventory management system 21
- online shoe store 21
- Library System 20
- chat system 19
- Pharmacy Management System 19
- E-Commerce Website 18
- Real Estate Property Management System 18
- Simple Online Hotel Reservation System 18
- Simple Pizza Ordering System 18
- Employee Management System 17
- Hostel Management System 16
- Online Appointment Booking System 16
- Simple Food Ordering System 16
- Client Details System 15
- Intern Membership Management System 15
- Online Class and Exam Scheduling System 15
- online restaurant management system 15
- Online Reviewer System 15
- Church Donation System 14
- Simple Admin Panel 14
- hospital management system 13
- Online Bidding System 13
- Online Product Reservation System 13
Latest code-projects CVEs
Newest publication first · page 22 of 40 · showing the latest 1,000
-
MediumCVSS 5.3 EPSS 0.40%
-
MediumCVSS 5.3 EPSS 0.41%
A flaw has been found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/supplier_add.php. Executing manipulation of the argument supp_email can lead to sql injection. The attack may be launched remotely. The exploit has been published and...
-
MediumCVSS 5.3 EPSS 0.41%
A vulnerability was detected in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/product_add.php. Performing manipulation of the argument prod_name results in sql injection. The attack may be initiated remotely. The exploit is now public a...
-
MediumCVSS 5.1 EPSS 0.45%
A security vulnerability has been detected in code-projects Voting System 1.0. This affects an unknown function of the file /admin/voters_add.php. Such manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been discl...
-
CVE-2025-11431 code-projects Web-Based Inventory and POS System transaction.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.41%A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. The impacted element is an unknown function of the file /transaction.php. This manipulation of the argument shopid causes sql injection. The attack is possible to be carried out remotely. The...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was determined in code-projects Web-Based Inventory and POS System 1.0. This impacts an unknown function of the file /login.php. Executing manipulation of the argument emailid can lead to sql injection. The attack may be performed from remote. The exploit has been...
-
MediumCVSS 5.1 EPSS 0.32%
A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible....
-
MediumCVSS 6.9 EPSS 0.42%
A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/edit_order_details.php. The manipulation of the argument order_id results in sql injection. The attack may be launched remotely. The exploit is now public and...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was identified in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /product.php. Such manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...
-
MediumCVSS 5.3 EPSS 0.34%
A security vulnerability has been detected in code-projects Simple Banking System 1.0. The affected element is an unknown function of the file /transfermoney.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploi...
-
MediumCVSS 5.3 EPSS 0.34%
A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to...
-
MediumCVSS 5.3 EPSS 0.34%
A security flaw has been discovered in code-projects Simple Banking System 1.0. This issue affects some unknown processing of the file /createuser.php. Performing manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit has bee...
-
CVE-2025-11354 code-projects Online Hotel Reservation System addslideexec.php unrestricted upload
PublishedMediumCVSS 5.3 EPSS 0.40%A flaw has been found in code-projects Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/addslideexec.php. Executing manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has...
-
CVE-2025-11353 code-projects Online Hotel Reservation System addgalleryexec.php unrestricted upload
PublishedMediumCVSS 5.3 EPSS 0.33%A vulnerability was detected in code-projects Online Hotel Reservation System 1.0. This impacts an unknown function of the file /admin/addgalleryexec.php. Performing manipulation of the argument image results in unrestricted upload. The attack is possible to be carried out remote...
-
CVE-2025-11352 code-projects Online Hotel Reservation System addexec.php unrestricted upload
PublishedMediumCVSS 5.3 EPSS 0.33%A security vulnerability has been detected in code-projects Online Hotel Reservation System 1.0. This affects an unknown function of the file /admin/addexec.php. Such manipulation of the argument image leads to unrestricted upload. The attack can be executed remotely. The exploit...
-
CVE-2025-11351 code-projects Online Hotel Reservation System editpicexec.php unrestricted upload
PublishedMediumCVSS 5.3 EPSS 0.33%A weakness has been identified in code-projects Online Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/editpicexec.php. This manipulation of the argument image causes unrestricted upload. Remote exploitation of the attack is possible....
-
MediumCVSS 6.9 EPSS 0.53%
A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function move_uploaded_file of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can...
-
MediumCVSS 6.9 EPSS 0.41%
A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disc...
-
MediumCVSS 5.1 EPSS 0.41%
A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has b...
-
MediumCVSS 6.9 EPSS 0.42%
A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may b...
-
MediumCVSS 5.1 EPSS 0.29%
A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The expl...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The exploit has been made public and could be u...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remote exploitation of the attack is possible. T...
-
MediumCVSS 6.9 EPSS 0.42%
A vulnerability was determined in code-projects Simple Scheduling System 1.0. Impacted is an unknown function of the file /schedulingsystem/addroom.php. Executing manipulation of the argument room can lead to sql injection. The attack may be performed from remote. The exploit has...
-
MediumCVSS 6.9 EPSS 0.42%
A vulnerability was found in code-projects Simple Scheduling System 1.0. This issue affects some unknown processing of the file /schedulingsystem/addcourse.php. Performing manipulation of the argument corcode results in sql injection. The attack is possible to be carried out remo...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.