Skip to content
OpenAdvisories

Vendor

code-projects

1,384 known vulnerabilities.

643 results · Clear filters · Feed

  • High 7.3

    code-projects Simple Content Management System Admin welcome.php authorization

    A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization.…

  • High 7.3

    code-projects Online Reviewer System User Update btn_functions.php sql injection

    A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_functions.php of the component User Update Handler. Such manipulation leads to …

  • High 7.3

    code-projects Internship Management System Admin Login Form login.php sql injection

    A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injecti…

  • High 7.3

    code-projects Internship Management System login.php sql injection

    A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carr…

  • High 7.3

    code-projects Internship Management System login.php sql injection

    A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remote…

  • High 7.3

    code-projects Matrimonial System partner_preference.php writepartnerprefs sql injection

    A vulnerability has been found in code-projects Matrimonial System 1.0. This vulnerability affects the function writepartnerprefs of the file /partner_preference.php. Such manipulation of the argument education leads to sql injection. The attack can be execut…

  • High 7.3

    code-projects Matrimonial System Regular Search search.php sql injection

    A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agema…

  • High 7.3

    code-projects Task Management System In PHP Login index.php sql injection

    A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The att…

  • High 7.3

    code-projects Content Management System login.php sql injection

    A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument user_name results in sql injection. The attack can be executed remotely. T…

  • High 7.3

    code-projects Vehicle Management System busprofile.php sql injection

    A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the atta…

  • High 7.3

    code-projects Doctor Appointment System contactus.php sql injection

    A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The e…

  • High 7.3

    code-projects Doctor Appointment System booking.php sql injection

    A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument doc_id results in sql injection. The attack may be launched remotely. The e…

  • High 7.3

    code-projects Hospital Information System PrespController.php getSinglePresp sql injection

    A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql inj…

  • High 7.3

    code-projects Hospital Information System viewReq.php viewReq sql injection

    A vulnerability was identified in code-projects Hospital Information System 1.0. Affected is the function viewReq of the file viewReq.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit i…

  • High 7.3

    code-projects Hospital Information System addReq.php findBySearch sql injection

    A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The …

  • High 7.3

    code-projects Doctor Appointment System patient_login.php sql injection

    A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient_login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exp…

  • High 7.3

    code-projects Online Shopping System Search Functionality action.php sql injection

    A vulnerability was determined in code-projects Online Shopping System 1.0. Affected by this issue is some unknown functionality of the file /action.php of the component Search Functionality. This manipulation of the argument keyword causes sql injection. It …

  • High 7.3

    code-projects Simple Inventory System edit.php sql injection

    A vulnerability was identified in code-projects Simple Inventory System 1.0. This vulnerability affects unknown code of the file /InventoryManagement/edit.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried ou…

  • High 7.3

    code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

    A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql in…

  • High 7.3

    code-projects Simple Inventory System delete.php sql injection

    A vulnerability has been found in code-projects Simple Inventory System 1.0. Affected by this issue is some unknown functionality of the file /delete.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The ex…

  • High 7.3

    code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection

    A flaw has been found in code-projects Employee Management System 1.0. The impacted element is an unknown function of the file /process/aprocess.php of the component Admin Login Endpoint. This manipulation of the argument mailuid causes sql injection. Remote …

  • High 7.3

    code-projects Assessment Management welcome.php sql injection

    A vulnerability was detected in code-projects Assessment Management 1.0. The affected element is an unknown function of the file /welcome.php. The manipulation of the argument userid results in sql injection. The attack may be launched remotely. The exploit i…

  • High 7.3

    code-projects Hospital Information System User Login UsersController.php login sql injection

    A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql inj…

  • High 7.3

    code-projects Online Job Portal System Password Recovery ForPass.php sql injection

    A vulnerability has been found in code-projects Online Job Portal System 1.0. The impacted element is an unknown function of the file /ForPass.php of the component Password Recovery. Such manipulation of the argument txtUserName leads to sql injection. The at…

  • High 7.3

    code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection

    A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection.…

  • High 7.3

    code-projects Online Shopping System Login login.php sql injection

    A vulnerability was found in code-projects Online Shopping System 1.0. This impacts an unknown function of the file /login.php of the component Login. The manipulation of the argument email results in sql injection. The attack may be performed from remote. Th…

  • High 7.3

    code-projects Task Management System comment_count_user.php sql injection

    A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/comment_count_user.php. The manipulation of the argument task_id leads to sql injection. It is possible to initi…

  • High 7.3

    code-projects Task Management System AdminLogin.php sql injection

    A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may …

  • High 7.3

    code-projects Task Management System Login index.php improper authentication

    A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possi…

  • High 7.3

    code-projects Hospital Bed Management System Login Form sql injection

    A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the component Login Form. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible…

  • High 7.3

    code-projects Online Job Portal JobSeekerInsert.php unrestricted upload

    A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. Th…

  • High 7.3

    code-projects Online Job Portal DeleteUser.php sql injection

    A security flaw has been discovered in code-projects Online Job Portal up to 1.0. The impacted element is an unknown function of the file /Admin/DeleteUser.php. Performing a manipulation results in sql injection. Remote exploitation of the attack is possible.…

  • High 7.3

    code-projects Online Job Portal EditUser.php sql injection

    A vulnerability was identified in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file /Admin/EditUser.php. Such manipulation of the argument UserId leads to sql injection. The attack may be launched remotely. The explo…

  • High 7.3

    code-projects Interview Management System View.php sql injection

    A weakness has been identified in code-projects Interview Management System 1.0. This vulnerability affects unknown code of the file \inc\classes\View.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The ex…

  • High 7.3

    code-projects Online Food Order System edit_food_items.php sql injection

    A security flaw has been discovered in code-projects Online Food Order System 1.0. This affects an unknown part of the file /edit_food_items.php. The manipulation of the argument update results in sql injection. It is possible to launch the attack remotely. T…

  • High 7.3

    code-projects Real State Services pay.php sql injection

    A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown processing of the file /pay.php. Such manipulation of the argument Bankname leads to sql injection. The attack may be performed from remote. T…

  • High 7.3

    code-projects Real State Services builderHome.php sql injection

    A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the file /builderHome.php. This manipulation of the argument loc causes sql injection. The attack is possible to be carried out remotely. The e…

  • High 7.3

    code-projects Hotel and Tourism Reservation Event Management add_event.php sql injection

    A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of the file /admin/add_event.php of the component Event Management Page. Such manipulation of the argument fdetails leads to sql injection. The…

  • High 7.3

    code-projects Hotel and Tourism Reservation Tour Reservations tour_reserves.php sql injection

    A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /admin/tour_reserves.php of the component Tour Reservations Page. This manipulation of the argument tour causes sql injection. The attack ca…

  • High 7.3
    CVE-2026-14762 Public exploit

    code-projects Hotel and Tourism Reservation Room Management rooms.php sql injection

    A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. …