code-projects vulnerabilities

Products

• exam form submission 30
• Blood Bank Management System 28
• patient record management system 28
• simple laundry system 26
• Job Recruitment 25
• online music site 23
• Blood Bank System 22
• inventory management system 21
• online shoe store 21
• Library System 20
• chat system 19
• Pharmacy Management System 19
• E-Commerce Website 18
• Real Estate Property Management System 18
• Simple Online Hotel Reservation System 18
• Simple Pizza Ordering System 18
• Employee Management System 17
• Hostel Management System 16
• Online Appointment Booking System 16
• Simple Food Ordering System 16
• Client Details System 15
• Intern Membership Management System 15
• Online Class and Exam Scheduling System 15
• online restaurant management system 15
• Online Reviewer System 15
• Church Donation System 14
• Simple Admin Panel 14
• hospital management system 13
• Online Bidding System 13
• Online Product Reservation System 13

Latest code-projects CVEs

Newest publication first · page 25 of 40 · showing the latest 1,000

1. CVE-2025-8931 code-projects Medical Store Management System ChangePassword.java sql injection

   Published 2025-08-14

   Medium·CVSS 5.3 EPSS 0.45%

   A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has...

2. CVE-2025-8930 code-projects Medical Store Management System Update Company UpdateCompany.java sql injection

   Published 2025-08-14

   Medium·CVSS 5.3 EPSS 0.45%

   A vulnerability was found in code-projects Medical Store Management System 1.0. This issue affects some unknown processing of the file UpdateCompany.java of the component Update Company Page. The manipulation of the argument companyNameTxt leads to sql injection. The attack may b...

3. CVE-2025-8929 code-projects Medical Store Management System MainPanel.java sql injection

   Published 2025-08-13

   Medium·CVSS 5.3 EPSS 0.45%

   A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument searchTxt leads to sql injection. The attack can be initiated remotely. The exploit has been d...

4. CVE-2025-8928 code-projects Medical Store Management System Update Medicines UpdateMedicines.java sql injection

   Published 2025-08-13

   Medium·CVSS 5.3 EPSS 0.45%

   A vulnerability was identified in code-projects Medical Store Management System 1.0. This affects an unknown part of the file UpdateMedicines.java of the component Update Medicines Page. The manipulation of the argument productNameTxt leads to sql injection. It is possible to ini...

5. CVE-2025-8923 code-projects Job Diary edit-details.php sql injection

   Published 2025-08-13

   Medium·CVSS 6.9 EPSS 0.49%

   A vulnerability was determined in code-projects Job Diary 1.0. This vulnerability affects unknown code of the file /edit-details.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and...

6. CVE-2025-8922 code-projects Job Diary admin-inbox.php sql injection

   Published 2025-08-13

   Medium·CVSS 6.9 EPSS 0.49%

   A vulnerability was found in code-projects Job Diary 1.0. This affects an unknown part of the file /admin-inbox.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

7. CVE-2025-8921 code-projects Job Diary user-apply.php sql injection

   Published 2025-08-13

   Medium·CVSS 6.9 EPSS 0.49%

   A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument job_title leads to sql injection. The attack may be launched remotely. The exploit has been disclosed...

8. CVE-2025-8859 code-projects eBlog Site File Upload save-slider.php unrestricted upload

   Published 2025-08-11

   Medium·CVSS 5.3 EPSS 0.39%

   A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionality of the file /native/admin/save-slider.php of the component File Upload Module. The manipulation leads to unrestricted upload. The attack can be launched remo...

9. CVE-2025-8811 code-projects Simple Art Gallery registration.php sql injection

   Published 2025-08-10

   Medium·CVSS 6.9 EPSS 0.61%

   A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be la...

10. CVE-2025-8809 code-projects Online Medicine Guide addelidetails.php sql injection

    Published 2025-08-10

    Medium·CVSS 6.9 EPSS 0.51%

    A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /addelidetails.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit...

11. CVE-2025-8504 code-projects Kitchen Treasure userregistration.php unrestricted upload

    Published 2025-08-03

    Medium·CVSS 5.3 EPSS 0.51%

    A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely....

12. CVE-2025-8503 code-projects Online Medicine Guide adaddmed.php sql injection

    Published 2025-08-03

    Medium·CVSS 6.9 EPSS 0.58%

    A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected by this issue is some unknown functionality of the file /adaddmed.php. The manipulation of the argument mname leads to sql injection. The attack may be launched...

13. CVE-2025-8502 code-projects Online Medicine Guide changepass.php sql injection

    Published 2025-08-03

    Medium·CVSS 6.9 EPSS 0.60%

    A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerability is an unknown functionality of the file /changepass.php. The manipulation of the argument ups leads to sql injection. The attack can be launched remotely. T...

14. CVE-2025-8501 code-projects Human Resource Integrated System action.php cross site scripting

    Published 2025-08-03

    Medium·CVSS 5.1 EPSS 0.44%

    A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the argument content leads to cross site scripting. It is possible to launc...

15. CVE-2025-8500 code-projects Human Resource Integrated System action.php sql injection

    Published 2025-08-03

    Medium·CVSS 5.3 EPSS 0.60%

    A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insert-and-view/action.php. The manipulation of the argument content leads to sql injection. The attack may be i...

16. CVE-2025-8499 code-projects Online Medicine Guide cusfindambulence2.php sql injection

    Published 2025-08-03

    Medium·CVSS 6.9 EPSS 0.72%

    A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cusfindambulence2.php. The manipulation of the argument Search leads to sql injection. The attack can be initiated remotely...

17. CVE-2025-8498 code-projects Online Medicine Guide index.php sql injection

    Published 2025-08-03

    Medium·CVSS 6.9 EPSS 0.58%

    A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /cart/index.php. Such manipulation of the argument uname leads to sql injection. The attack can be executed remotely. The exploit has been di...

18. CVE-2025-8497 code-projects Online Medicine Guide cusfindphar2.php sql injection

    Published 2025-08-03

    Medium·CVSS 6.9 EPSS 0.58%

    A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cusfindphar2.php. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available...

19. CVE-2025-8495 code-projects Intern Membership Management System edit_admin_query.php sql injection

    Published 2025-08-03

    Medium·CVSS 6.9 EPSS 0.60%

    A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/edit_admin_query.php. The manipulation of the argument Username leads to sql injection. It is possible to laun...

20. CVE-2025-8494 code-projects Intern Membership Management System delete_student.php sql injection

    Published 2025-08-02

    Medium·CVSS 6.9 EPSS 0.60%

    A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1.0. This issue affects some unknown processing of the file /admin/delete_student.php. The manipulation of the argument ID leads to sql injection. The attack may...

21. CVE-2025-8493 code-projects Intern Membership Management System edit_student_query.php sql injection

    Published 2025-08-02

    Medium·CVSS 6.9 EPSS 0.58%

    A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerability affects unknown code of the file /admin/edit_student_query.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated re...

22. CVE-2025-8468 code-projects Wazifa System reset.php sql injection

    Published 2025-08-02

    Medium·CVSS 6.9 EPSS 0.53%

    A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...

23. CVE-2025-8467 code-projects Wazifa System regcontrol.php sql injection

    Published 2025-08-02

    Medium·CVSS 6.9 EPSS 0.53%

    A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be...

24. CVE-2025-8466 code-projects Online Farm System forgot_passfarmer.php sql injection

    Published 2025-08-02

    Medium·CVSS 6.9 EPSS 0.51%

    A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgot_passfarmer.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely....

25. CVE-2025-8443 code-projects Online Medicine Guide login.php sql injection

    Published 2025-08-01

    Medium·CVSS 6.9 EPSS 0.61%

    A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack may be launched remotely. The ex...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.