A vulnerability, which was classified as problematic, was found in code-projects School Fees Payment System 1.0. This affects an unknown part of the file /fees.php. The manipulation of the argument transcation_remark leads to cross site scripting. It is possible to initiate the a...
Vendor
code-projects vulnerabilities
1,482 published CVES affecting code-projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,482
- Critical
- 73
- High
- 38
- Medium
- 1,370
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- exam form submission 30
- Blood Bank Management System 28
- patient record management system 28
- simple laundry system 26
- Job Recruitment 25
- online music site 23
- Blood Bank System 22
- inventory management system 21
- online shoe store 21
- Library System 20
- chat system 19
- Pharmacy Management System 19
- E-Commerce Website 18
- Real Estate Property Management System 18
- Simple Online Hotel Reservation System 18
- Simple Pizza Ordering System 18
- Employee Management System 17
- Hostel Management System 16
- Online Appointment Booking System 16
- Simple Food Ordering System 16
- Client Details System 15
- Intern Membership Management System 15
- Online Class and Exam Scheduling System 15
- online restaurant management system 15
- Online Reviewer System 15
- Church Donation System 14
- Simple Admin Panel 14
- hospital management system 13
- Online Bidding System 13
- Online Product Reservation System 13
Latest code-projects CVEs
Newest publication first · page 35 of 40 · showing the latest 1,000
-
MediumCVSS 5.3 EPSS 0.40%
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability, which was classified as critical, has been found in code-projects Online Bidding System 1.0. Affected by this issue is some unknown functionality of the file /showprod.php. The manipulation of the argument ID leads to sql injection. The attack may be launched rem...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability classified as critical was found in code-projects Online Bidding System 1.0. Affected by this vulnerability is an unknown functionality of the file /administrator. The manipulation of the argument aduser leads to sql injection. The attack can be launched remotely....
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability classified as critical has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /bidlog.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was found in code-projects Online Bidding System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was found in code-projects Online Bidding System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /bidnow.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit h...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was found in code-projects Online Bidding System 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...
-
CVE-2025-6458 code-projects Online Hotel Reservation System execedituser.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.48%A vulnerability has been found in code-projects Online Hotel Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/execedituser.php. The manipulation of the argument userid leads to sql injection. The attack can be initiated...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability, which was classified as critical, was found in code-projects Online Hotel Reservation System 1.0. This affects an unknown part of the file /reservation/demo.php. The manipulation of the argument Start leads to sql injection. It is possible to initiate the attack...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability, which was classified as critical, has been found in code-projects Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /reservation/order.php. The manipulation of the argument Start leads to sql injection. The atta...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability classified as critical was found in code-projects Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /messageexec.php. The manipulation of the argument Name leads to sql injection. The attack can be launched...
-
CVE-2025-6451 code-projects Simple Online Hotel Reservation System delete_pending.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.48%A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/delete_pending.php. The manipulation of the argument transaction_id leads to sql injection. The atta...
-
CVE-2025-6450 code-projects Simple Online Hotel Reservation System confirm_reserve.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.48%A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/confirm_reserve.php. The manipulation of the argument transaction_id leads to sql injection. It is possible t...
-
CVE-2025-6449 code-projects Simple Online Hotel Reservation System checkout_query.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.48%A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/checkout_query.php. The manipulation of the argument transaction_id leads to sql injection. Th...
-
CVE-2025-6448 code-projects Simple Online Hotel Reservation System delete_room.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.48%A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_room.php. The manipulation of the argument room_id leads to sql injection. T...
-
CVE-2025-6447 code-projects Simple Online Hotel Reservation System index.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.48%A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the a...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be...
-
CVE-2025-6421 code-projects Simple Online Hotel Reservation System add_account.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.55%A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/add_account.php. The manipulation of the argument name/admin_id leads to sql injection. The attack m...
-
CVE-2025-6420 code-projects Simple Online Hotel Reservation System add_room.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.55%A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add_room.php. The manipulation of the argument room_type leads to sql injection. The attack can be i...
-
CVE-2025-6419 code-projects Simple Online Hotel Reservation System edit_room.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.55%A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/edit_room.php. The manipulation of the argument room_type leads to sql injection. It is possible to initiate...
-
MediumCVSS 6.9 EPSS 0.48%
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit_query_account.php. The manipulation of the argument Name leads to sql injection. The atta...
-
MediumCVSS 6.9 EPSS 2.0%
A vulnerability was found in code-projects School Fees Payment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exp...
-
CVE-2025-6394 code-projects Simple Online Hotel Reservation System add_reserve.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.49%A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_reserve.php. The manipulation of the argument firstname leads to sql injection. The...
-
MediumCVSS 6.9 EPSS 0.49%
A vulnerability has been found in code-projects Simple Pizza Ordering System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /adduser-exec.php. The manipulation of the argument Username leads to sql injection. The attack can...
-
MediumCVSS 6.9 EPSS 0.49%
A vulnerability, which was classified as critical, was found in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /adding-exec.php. The manipulation of the argument ingname leads to sql injection. It is possible to launch the attack remot...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.