A flaw has been found in code-projects Online Shoe Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_football.php. Executing a manipulation of the argument product_name can lead to cross site scripting. It is possible to launch the att...
Vendor
code-projects vulnerabilities
1,482 published CVES affecting code-projects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 1,482
- Critical
- 73
- High
- 38
- Medium
- 1,370
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- exam form submission 30
- Blood Bank Management System 28
- patient record management system 28
- simple laundry system 26
- Job Recruitment 25
- online music site 23
- Blood Bank System 22
- inventory management system 21
- online shoe store 21
- Library System 20
- chat system 19
- Pharmacy Management System 19
- E-Commerce Website 18
- Real Estate Property Management System 18
- Simple Online Hotel Reservation System 18
- Simple Pizza Ordering System 18
- Employee Management System 17
- Hostel Management System 16
- Online Appointment Booking System 16
- Simple Food Ordering System 16
- Client Details System 15
- Intern Membership Management System 15
- Online Class and Exam Scheduling System 15
- online restaurant management system 15
- Online Reviewer System 15
- Church Donation System 14
- Simple Admin Panel 14
- hospital management system 13
- Online Bidding System 13
- Online Product Reservation System 13
Latest code-projects CVEs
Newest publication first · page 9 of 40 · showing the latest 1,000
-
MediumCVSS 4.8 EPSS 0.21%
-
MediumCVSS 4.8 EPSS 0.21%
A vulnerability was detected in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /admin/admin_running.php. Performing a manipulation of the argument product_name results in cross site scripting. It is possible to initiate the attack remotely. The e...
-
MediumCVSS 6.9 EPSS 0.26%
A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0. The impacted element is an unknown function of the file /pages/content.php. This manipulation of the argument post_id causes sql injection. Remote exploitation of the attack is possible. The exploit h...
-
MediumCVSS 6.9 EPSS 0.33%
A vulnerability was found in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /functions/addcomment.php. The manipulation of the argument postid results in sql injection. The attack may be launched remotely. The exploit has bee...
-
CVE-2026-5827 code-projects Simple IT Discussion Forum question-function.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.35%A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclose...
-
CVE-2026-5826 code-projects Simple IT Discussion Forum edit-category.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.37%A flaw has been found in code-projects Simple IT Discussion Forum 1.0. This issue affects some unknown processing of the file /edit-category.php. Executing a manipulation of the argument Category can lead to cross site scripting. The attack can be launched remotely. The exploit h...
-
MediumCVSS 5.3 EPSS 0.37%
A vulnerability was detected in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /delmemberinfo.php. Performing a manipulation of the argument userid results in cross site scripting. The attack can be initiated remotely. The exploit is...
-
MediumCVSS 6.9 EPSS 0.33%
A security vulnerability has been detected in code-projects Simple Laundry System 1.0. This affects an unknown part of the file /userchecklogin.php. Such manipulation of the argument userid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
-
MediumCVSS 5.1 EPSS 0.25%
A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been dis...
-
MediumCVSS 6.9 EPSS 0.26%
A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contact_us.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has b...
-
CVE-2026-5705 code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.37%A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booking Endpoint. Such manipulation of the argument roomname leads to cross site scripting. It is possibl...
-
CVE-2026-5672 code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.26%A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /edit-category.php of the component Parameter Handler. The manipulation of the argument cat_id leads to sql injection. It is possible t...
-
MediumCVSS 6.9 EPSS 0.31%
A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The atta...
-
MediumCVSS 6.9 EPSS 0.33%
A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The atta...
-
CVE-2026-5650 code-projects Online Application System for Admission oas.sql sensitive information
PublishedMediumCVSS 6.9 EPSS 0.31%A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried o...
-
MediumCVSS 5.3 EPSS 0.25%
A vulnerability has been found in code-projects Online Application System for Admission 1.0. This issue affects some unknown processing of the file /enrollment/admsnform.php of the component Endpoint. Such manipulation leads to sql injection. The attack can be executed remotely....
-
CVE-2026-5648 code-projects Simple Laundry System Parameter userfinishregister.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.26%A flaw has been found in code-projects Simple Laundry System 1.0. This vulnerability affects unknown code of the file /userfinishregister.php of the component Parameter Handler. This manipulation of the argument firstName causes sql injection. Remote exploitation of the attack is...
-
CVE-2026-5647 code-projects Online Shoe Store Add Product admin_feature.php cross site scripting
PublishedMediumCVSS 4.8 EPSS 0.21%A vulnerability was detected in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/admin_feature.php of the component Add Product Page. The manipulation of the argument product_name results in cross site scripting. The attack may be launched remo...
-
MediumCVSS 6.9 EPSS 0.33%
A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit...
-
CVE-2026-5565 code-projects Simple Laundry System Parameter delmemberinfo.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.26%A security vulnerability has been detected in code-projects Simple Laundry System 1.0. Affected by this issue is some unknown functionality of the file /delmemberinfo.php of the component Parameter Handler. Such manipulation of the argument userid leads to sql injection. The atta...
-
MediumCVSS 6.9 EPSS 0.26%
A weakness has been identified in code-projects Simple Laundry System 1.0. Affected by this vulnerability is an unknown functionality of the file /searchguest.php of the component Parameter Handler. This manipulation of the argument searchServiceId causes sql injection. The attac...
-
CVE-2026-5555 code-projects Concert Ticket Reservation System Parameter login.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.26%A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql inje...
-
MediumCVSS 6.9 EPSS 0.26%
A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/process_search.php of the component Parameter Handler. Performing a manipulation of...
-
CVE-2026-5542 code-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.34%A vulnerability was determined in code-projects Simple Laundry System 1.0. Impacted is an unknown function of the file /modstaffinfo.php of the component Parameter Handler. Executing a manipulation of the argument userid can lead to cross site scripting. The attack may be launche...
-
CVE-2026-5541 code-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.29%A vulnerability was found in code-projects Simple Laundry System 1.0. This issue affects some unknown processing of the file /modmemberinfo.php of the component Parameter Handler. Performing a manipulation of the argument userid results in cross site scripting. The attack may be...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.