A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogs_view.php. Executing manipulation of the argument product_code/gen_name/product_name/supplier can lead to cross site scripting. It is possible to launch the...
Vendor
code-projects vulnerabilities
1,482 published CVES affecting code-projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,482
- Critical
- 73
- High
- 38
- Medium
- 1,370
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- exam form submission 30
- Blood Bank Management System 28
- patient record management system 28
- simple laundry system 26
- Job Recruitment 25
- online music site 23
- Blood Bank System 22
- inventory management system 21
- online shoe store 21
- Library System 20
- chat system 19
- Pharmacy Management System 19
- E-Commerce Website 18
- Real Estate Property Management System 18
- Simple Online Hotel Reservation System 18
- Simple Pizza Ordering System 18
- Employee Management System 17
- Hostel Management System 16
- Online Appointment Booking System 16
- Simple Food Ordering System 16
- Client Details System 15
- Intern Membership Management System 15
- Online Class and Exam Scheduling System 15
- online restaurant management system 15
- Online Reviewer System 15
- Church Donation System 14
- Simple Admin Panel 14
- hospital management system 13
- Online Bidding System 13
- Online Product Reservation System 13
Latest code-projects CVEs
Newest publication first · page 24 of 40 · showing the latest 1,000
-
MediumCVSS 4.8 EPSS 0.32%
-
MediumCVSS 4.8 EPSS 0.31%
A weakness has been identified in code-projects POS Pharmacy System 1.0. Affected is an unknown function of the file /main/products.php. This manipulation of the argument product_code/gen_name/product_name/supplier causes cross site scripting. The attack can be initiated remotely...
-
CVE-2025-9845 code-projects Fruit Shop Management System products.php cross site scripting
PublishedMediumCVSS 5.1 EPSS 0.30%A vulnerability has been found in code-projects Fruit Shop Management System 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. Such manipulation of the argument product_code/gen_name/product_name/supplier leads to cross site scripting. It i...
-
CVE-2025-9841 code-projects Mobile Shop Management System AddNewProduct.php unrestricted upload
PublishedMediumCVSS 5.3 EPSS 0.35%A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown function of the file AddNewProduct.php. The manipulation of the argument ProductImage leads to unrestricted upload. The attack is possible to be carried out remo...
-
CVE-2025-9743 code-projects Human Resource Integrated System login_attendance2.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.51%A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file login_attendance2.php. Performing manipulation of the argument employee_id/date results in sql injection. The attack can be initiated remotely. T...
-
MediumCVSS 6.9 EPSS 0.46%
A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit i...
-
CVE-2025-9741 code-projects Human Resource Integrated System login_query12.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.43%A vulnerability was determined in code-projects Human Resource Integrated System 1.0. This vulnerability affects unknown code of the file /login_query12.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has...
-
MediumCVSS 6.9 EPSS 0.49%
A vulnerability was found in code-projects Human Resource Integrated System 1.0. This affects an unknown part of the file /log_query.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and co...
-
CVE-2025-9733 code-projects Human Resource Integrated System login_timeee.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.49%A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. This impacts an unknown function of the file /login_timeee.php. Performing manipulation of the argument emp_id results in sql injection. The attack may be initiated remotely. The exploit ha...
-
CVE-2025-9667 code-projects Simple Grading System Admin Panel delete_account.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.40%A vulnerability was detected in code-projects Simple Grading System 1.0. This affects an unknown part of the file /delete_account.php of the component Admin Panel. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The explo...
-
CVE-2025-9666 code-projects Simple Grading System Admin Panel delete_student.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.40%A security vulnerability has been detected in code-projects Simple Grading System 1.0. Affected by this issue is some unknown functionality of the file /delete_student.php of the component Admin Panel. Such manipulation of the argument ID leads to sql injection. The attack can be...
-
CVE-2025-9665 code-projects Simple Grading System Admin Panel edit_student.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.40%A weakness has been identified in code-projects Simple Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_student.php of the component Admin Panel. This manipulation of the argument ID causes sql injection. The attack can be initiated...
-
CVE-2025-9664 code-projects Simple Grading System Admin Panel add_student_grade.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.51%A security flaw has been discovered in code-projects Simple Grading System 1.0. Affected is an unknown function of the file /add_student_grade.php of the component Admin Panel. The manipulation of the argument Add results in sql injection. It is possible to launch the attack remo...
-
CVE-2025-9663 code-projects Simple Grading System Admin Panel edit_account.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.51%A vulnerability was identified in code-projects Simple Grading System 1.0. This impacts an unknown function of the file /edit_account.php of the component Admin Panel. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...
-
MediumCVSS 6.9 EPSS 0.62%
A vulnerability was determined in code-projects Simple Grading System 1.0. This affects an unknown function of the file /login.php of the component Admin Panel. Executing manipulation can lead to sql injection. The attack may be performed from a remote location. The exploit has b...
-
MediumCVSS 6.9 EPSS 0.43%
A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /create_account.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploi...
-
CVE-2025-9595 code-projects Student Information Management System login.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.41%A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. Th...
-
MediumCVSS 6.9 EPSS 0.48%
A flaw has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /adphar.php. Executing manipulation of the argument phuname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may...
-
MediumCVSS 6.9 EPSS 0.62%
A vulnerability has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /addelivery.php. The manipulation of the argument deName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
-
MediumCVSS 5.3 EPSS 0.39%
A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been dis...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was determined in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /browsemdcn.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
-
CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication
PublishedMediumCVSS 4.8 EPSS 0.30%A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit h...
-
MediumCVSS 4.8 EPSS 0.32%
A vulnerability was found in code-projects Hostel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file hostel_manage.exe of the component Login Form. The manipulation of the argument uname leads to stack-based buffer overflow. Local access...
-
MediumCVSS 6.9 EPSS 0.57%
A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of the file /admin/edit-doctor.php. The manipulation of the argument docfees leads to sql injection. The attack can be initiated remotely. The exploit has been dis...
-
CVE-2025-8954 PHPGurukul Hospital Management System doctor-specilization.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.46%A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql injection. It is possible to initiate the attack remotely. The...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.