Skip to content
OpenAdvisories

Vendor

code-projects

1,384 known vulnerabilities.

Products

Blood Bank Management System 28 Exam Form Submission 28 Patient Record Management System 27 Job Recruitment 25 Online Music Site 23 Online Shoe Store 21 Inventory Management System 21 Simple Laundry System 21 Blood Bank System 20 Library System 20 Chat System 19 Pharmacy Management System 19 Simple Pizza Ordering System 18 Simple Online Hotel Reservation System 18 Real Estate Property Management System 18 E-Commerce Website 18 Employee Management System 17 Simple Food Ordering System 16 Hostel Management System 16 Online Appointment Booking System 16 Intern Membership Management System 15 Online Reviewer System 15 Client Details System 15 Church Donation System 14 Online Bidding System 13 Online Product Reservation System 13 Student File Management System 13 Refugee Food Management System 12 Online Medicine Guide 12 Farmacia 12 Voting System 12 Vehicle Showroom Management System 12 Modern Bag 11 Online Ordering System 11 Content Management System 11 Responsive Hotel Site 11 Simple Admin Panel 10 Online Event Judging System 10 Vehicle Management 10 Wazifa System 10
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • High 7.3
    CVE-2026-14762 Public exploit

    code-projects Hotel and Tourism Reservation Room Management rooms.php sql injection

    A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. …

    code-projects Hotel and Tourism Reservation
  • High 7.3
    CVE-2026-11344 Public exploit

    code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload

    A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload.…

    code-projects Vehicle Management System
  • High 7.3
    CVE-2026-10290 Public exploit

    code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

    A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql in…

    code-projects Hotel and Tourism Reservation System
  • High 7.3
    CVE-2026-10288 Public exploit

    code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

    A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper a…

    code-projects Hotel and Tourism Reservation System
  • High 7.3
    CVE-2026-10243 Public exploit

    code-projects Smart Parking System Admin Endpoint missing authentication

    A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit…

    code-projects Smart Parking System
  • High 7.3
    CVE-2026-10110 Public exploit

    code-projects Student Details Management System index.php sql injection

    A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument roll results in sql injection. The attack is possible to be carried out rem…

    code-projects Student Details Management System
  • High 7.3
    CVE-2026-7070 Public exploit

    code-projects Inventory Management System Login sql injection

    A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The expl…

    code-projects Inventory Management System
  • High 7.3
    CVE-2026-6183 Public exploit

    code-projects Simple Content Management System index.php sql injection

    A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitat…

    code-projects Simple Content Management System
  • High 7.3
    CVE-2026-6182 Public exploit

    code-projects Simple Content Management System login.php sql injection

    A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. Such manipulation of the argument User leads to sql injection. The attack may be…

    code-projects Simple Content Management System
  • High 7.3
    CVE-2026-5555 Public exploit

    code-projects Concert Ticket Reservation System Parameter login.php sql injection

    A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email…

    code-projects Concert Ticket Reservation System
  • High 7.3
    CVE-2025-7753 Public exploit

    code-projects Online Appointment Booking System adddoctor.php sql injection

    A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adddoctor.php. The manipulation of the argument Username leads to sql injection. It is possib…

    code-projects Online Appointment Booking System
  • High 7.3
    CVE-2025-7606 Public exploit

    code-projects AVL Rooms city.php sql injection

    A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection. It is possible to initiate the attack remotely. The exploit…

    code-projects AVL Rooms
  • High 7.3
    CVE-2025-7605 Public exploit

    code-projects AVL Rooms profile.php sql injection

    A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument first_name leads to sql injection. The attack may be launc…

    code-projects AVL Rooms
  • High 7.3
    CVE-2025-7461 Public exploit

    code-projects Modern Bag action.php sql injection

    A vulnerability was found in code-projects Modern Bag 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument proId leads to sql injection. The attack may be launched remot…

    code-projects Modern Bag
  • High 7.3
    CVE-2025-6907 Public exploit

    code-projects Car Rental System book_car.php sql injection

    A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /book_car.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. Th…

    code-projects Car Rental System
  • High 7.3
    CVE-2024-10758 Public exploit

    code-projects/anirbandutta9 Content Management System/News-Buzz index.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument user_name leads to sql injection. It…

    code-projects anirbandutta9 Content Management System Content Management System
  • High 7.3
    CVE-2024-7808 Public exploit

    code-projects Job Portal logindbc.php sql injection

    A vulnerability was found in code-projects Job Portal 1.0. It has been classified as critical. Affected is an unknown function of the file logindbc.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotel…

    code-projects Job Portal