A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument category_image leads to unr...
Vendor
codeprojects vulnerabilities
32 published CVES affecting codeprojects, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 32
- Critical
- 3
- High
- 3
- Medium
- 26
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Online Restaurant Management System 16
- Farmacia 2
- health care hospital management system 2
- News Publishing Site Dashboard 2
- Online Driving School 2
- blood bank system 1
- Patient Record Management System 1
- Pharmacy Management System 1
- Product Management System 1
- responsive hotel site 1
- restaurant reservation system 1
- simple car rental system 1
- wazifa system 1
Latest codeprojects CVEs
Newest publication first · page 1 of 2
-
MediumCVSS 5.3 EPSS 0.55%
-
MediumCVSS 5.3 EPSS 0.53%
A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument cat_id leads to sql injection. The attack can be initiated remotely. The...
-
CVE-2025-3955 codeprojects Patient Record Management System edit_rpatient.php.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.46%A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possible to initiate the...
-
MediumCVSS 6.9 EPSS 0.57%
A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/combo.php. The manipulation of the argument del leads to sql injection. The attack ca...
-
CVE-2025-3344 codeprojects Online Restaurant Management System assign_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/assign_save.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the atta...
-
CVE-2025-3343 codeprojects Online Restaurant Management System reservation_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/reservation_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initia...
-
CVE-2025-3342 codeprojects Online Restaurant Management System payment_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/payment_save.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated...
-
CVE-2025-3341 codeprojects Online Restaurant Management System reservation_view.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file /admin/reservation_view.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the a...
-
CVE-2025-3340 codeprojects Online Restaurant Management System combo_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/combo_update.php. The manipulation of the argument ID leads to sql injection. The att...
-
CVE-2025-3339 codeprojects Online Restaurant Management System user_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user_update.php. The manipulation of the argument ID leads to sql injection. The attack can be l...
-
CVE-2025-3338 codeprojects Online Restaurant Management System user_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/user_save.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remot...
-
CVE-2025-3337 codeprojects Online Restaurant Management System member_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.46%A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/member_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiat...
-
CVE-2025-3336 codeprojects Online Restaurant Management System member_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.46%A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack can be initiat...
-
CVE-2025-3335 codeprojects Online Restaurant Management System category_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.46%A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/category_update.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the a...
-
CVE-2025-3334 codeprojects Online Restaurant Management System category_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_save.php. The manipulation of the argument Category leads to sql injection. The attack ma...
-
CVE-2025-3333 codeprojects Online Restaurant Management System menu_update.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menu_update.php. The manipulation of the argument menu leads to sql injection. The atta...
-
CVE-2025-3332 codeprojects Online Restaurant Management System menu_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.61%A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. It is possible to launch the attac...
-
CVE-2025-3331 codeprojects Online Restaurant Management System payment_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.61%A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown processing of the file /payment_save.php. The manipulation of the argument mode leads to sql injection. The attack may be ini...
-
CVE-2025-3330 codeprojects Online Restaurant Management System reservation_save.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.61%A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation of the argument first leads to sql injection. The attack can be initiated remotely...
-
MediumCVSS 4.8 EPSS 0.25%
A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploi...
-
CVE-2024-12001 code-projects Wazifa System Setting updatesettings.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.46%A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is an unknown function of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross site scripting. It...
-
CVE-2024-12000 code-projects Blood Bank System Setting updatesettings.php cross site scripting
PublishedMediumCVSS 5.3 EPSS 0.46%A vulnerability was found in code-projects Blood Bank System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /controllers/updatesettings.php of the component Setting Handler. The manipulation of the argument firstname leads to cross s...
-
MediumCVSS 5.3 EPSS 0.45%
A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /visualizer-forneccedor.chp. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploi...
-
MediumCVSS 5.3 EPSS 0.68%
A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The attack may be launche...
-
MediumCVSS 6.9 EPSS 0.91%
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. T...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.