A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclose...
Vendor
code-projects vulnerabilities
1,482 published CVES affecting code-projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,482
- Critical
- 73
- High
- 38
- Medium
- 1,370
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- exam form submission 30
- Blood Bank Management System 28
- patient record management system 28
- simple laundry system 26
- Job Recruitment 25
- online music site 23
- Blood Bank System 22
- inventory management system 21
- online shoe store 21
- Library System 20
- chat system 19
- Pharmacy Management System 19
- E-Commerce Website 18
- Real Estate Property Management System 18
- Simple Online Hotel Reservation System 18
- Simple Pizza Ordering System 18
- Employee Management System 17
- Hostel Management System 16
- Online Appointment Booking System 16
- Simple Food Ordering System 16
- Client Details System 15
- Intern Membership Management System 15
- Online Class and Exam Scheduling System 15
- online restaurant management system 15
- Online Reviewer System 15
- Church Donation System 14
- Simple Admin Panel 14
- hospital management system 13
- Online Bidding System 13
- Online Product Reservation System 13
Latest code-projects CVEs
Newest publication first · page 38 of 40 · showing the latest 1,000
-
MediumCVSS 5.3 EPSS 0.34%
-
MediumCVSS 5.3 EPSS 0.43%
A vulnerability, which was classified as critical, was found in code-projects Health Center Patient Record Management System 1.0. Affected is an unknown function of the file /birthing_record.php. The manipulation of the argument itr_no leads to sql injection. It is possible to la...
-
CVE-2025-5711 code-projects Real Estate Property Management System InsertCity.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.55%A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/InsertCity.php. The manipulation of the argument cmbState leads to sql injection. It is possible to launch...
-
CVE-2025-5710 code-projects Real Estate Property Management System InsertState.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.55%A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/InsertState.php. The manipulation of the argument txtStateName leads to sql injection. The...
-
CVE-2025-5709 code-projects Real Estate Property Management System InsertCategory.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.55%A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. This vulnerability affects unknown code of the file /Admin/InsertCategory.php. The manipulation of the argument txtCategoryName leads to sql injection. The attack can be...
-
CVE-2025-5708 code-projects Real Estate Property Management System NewsReport.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.54%A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Admin/NewsReport.php. The manipulation of the argument txtFrom leads to sql injection. It is possible to initiate the attac...
-
CVE-2025-5705 code-projects Real Estate Property Management System Property.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.55%A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/Property.php. The manipulation of the argument cmbCat leads to sql injection. It is possible to launch the...
-
MediumCVSS 6.9 EPSS 0.53%
A vulnerability was found in code-projects Real Estate Property Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /Admin/User.php. The manipulation of the argument txtUserName leads to sql injection. The attack may be initiat...
-
CVE-2025-5674 code-projects Patient Record Management System urinalysis_form.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.50%A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file urinalysis_form.php. The manipulation of the argument urinalysis_id leads to sql injection. The attack may...
-
MediumCVSS 4.8 EPSS 0.36%
A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file /save-settings.php of the component Setting Handler. The manipulation of the argument site_name leads to cross site scri...
-
CVE-2025-5651 code-projects Traffic Offense Reporting System saveuser.php cross site scripting
PublishedMediumCVSS 5.1 EPSS 0.32%A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument user_id/username/email/name/position leads to cross si...
-
MediumCVSS 5.3 EPSS 0.53%
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/users.php. The manipulation of the argument delete leads to sql injection....
-
MediumCVSS 5.3 EPSS 0.53%
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/users.php. The manipulation of the argument change_to_admin leads...
-
MediumCVSS 6.9 EPSS 0.64%
A vulnerability was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. It has been classified as critical. Affected is an unknown function of the file /publicposts.php. The manipulation of the argument post leads to sql injection. It is possible to...
-
CVE-2025-5627 code-projects Patient Record Management System sputum_form.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.43%A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /sputum_form.php. The manipulation of the argument itr_no leads to sql injection. The attack can be launc...
-
MediumCVSS 6.1 EPSS 0.32%
code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via the name field in the feedback form.
-
MediumCVSS 4.8 EPSS 0.38%
A vulnerability was found in code-projects Police Station Management System 1.0. It has been declared as critical. Affected by this vulnerability is the function criminal::remove of the file source.cpp of the component Delete Record. The manipulation of the argument No leads to s...
-
MediumCVSS 4.8 EPSS 0.37%
A vulnerability was found in code-projects Police Station Management System 1.0. It has been classified as critical. Affected is the function criminal::display of the file source.cpp of the component Display Record. The manipulation of the argument N leads to buffer overflow. It...
-
CVE-2025-4890 code-projects Tourism Management System Login User LoginUser stack-based overflow
PublishedMediumCVSS 4.8 EPSS 0.38%A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. The manipulation of the argument username/password leads to stack-based buffer overflow. Attacking locally i...
-
CVE-2025-4889 code-projects Tourism Management System User Registration AddUser buffer overflow
PublishedMediumCVSS 4.8 EPSS 0.37%A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access...
-
CVE-2025-4888 code-projects Pharmacy Management System Add Order Details take_order buffer overflow
PublishedMediumCVSS 4.8 EPSS 0.37%A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::take_order of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally....
-
CVE-2025-4745 code-projects Employee Record System current_employees.php cross site scripting
PublishedMediumCVSS 5.1 EPSS 0.38%A vulnerability, which was classified as problematic, was found in code-projects Employee Record System 1.0. This affects an unknown part of the file current_employees.php. The manipulation of the argument employeed_id/first_name/middle_name/last_name leads to cross site scriptin...
-
MediumCVSS 5.1 EPSS 0.38%
A vulnerability, which was classified as problematic, has been found in code-projects Employee Record System 1.0. Affected by this issue is some unknown functionality of the file dashboard\edit_employee.php. The manipulation of the argument employeed_id/first_name/middle_name/las...
-
MediumCVSS 5.3 EPSS 0.53%
A vulnerability classified as critical was found in code-projects Employee Record System 1.0. Affected by this vulnerability is an unknown functionality of the file /dashboard/getData.php. The manipulation of the argument keywords leads to sql injection. The attack can be launche...
-
CVE-2025-4501 code-projects Album Management System Search Albums searchalbum stack-based overflow
PublishedMediumCVSS 4.8 EPSS 0.37%A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. This affects the function searchalbum of the component Search Albums. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.