Skip to content

Vendor

code-projects vulnerabilities

1,482 published CVES affecting code-projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1,482
Critical
73
High
38
Medium
1,370
Low
1
Unscored
0
CISA KEV
0
Atom feed of code-projects alerts

Products

Latest code-projects CVEs

Newest publication first · page 9 of 40 · showing the latest 1,000

  1. MediumCVSS 6.9 EPSS 0.26%

    A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0. The impacted element is an unknown function of the file /pages/content.php. This manipulation of the argument post_id causes sql injection. Remote exploitation of the attack is possible. The exploit h...

  2. MediumCVSS 5.1 EPSS 0.25%

    A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been dis...

  3. MediumCVSS 6.9 EPSS 0.26%

    A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contact_us.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has b...

  4. MediumCVSS 6.9 EPSS 0.33%

    A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The atta...

  5. MediumCVSS 6.9 EPSS 0.33%

    A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.