Skip to content
OpenAdvisories

Vendor

code-projects

1,383 known vulnerabilities.

643 results · Clear filters · Feed

  • High 7.3

    code-projects Hotel and Tourism Reservation Tour Management add_tour.php sql injection

    A vulnerability was found in code-projects Hotel and Tourism Reservation 1.0. Affected by this issue is some unknown functionality of the file /admin/add_tour.php of the component Tour Management Page. The manipulation of the argument delete_image results in …

  • High 7.3

    code-projects Hotel and Tourism Reservation Reservations Management reservations.php sql injection

    A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/reservations.php of the component Reservations Management Page. The manipulation of the argument d…

  • High 7.3

    code-projects Hotel and Tourism Reservation add_room.php sql injection

    A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipulation of the argument delete_image/edit/description/number/price/rooms/type can lead to sql injection…

  • High 7.3

    code-projects Real State Services addprojectsale.php sql injection

    A vulnerability was detected in code-projects Real State Services 1.0. Affected by this vulnerability is an unknown functionality of the file /addprojectsale.php. The manipulation of the argument amen results in sql injection. The attack can be launched remot…

  • High 7.3

    code-projects Real State Services addprojectrent.php sql injection

    A security vulnerability has been detected in code-projects Real State Services 1.0. Affected is an unknown function of the file /addprojectrent.php. The manipulation of the argument amen leads to sql injection. The attack can be initiated remotely. The explo…

  • High 7.3

    code-projects Real State Services single-list_rent.php sql injection

    A weakness has been identified in code-projects Real State Services 1.0. This impacts an unknown function of the file /single-list_rent.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. T…

  • High 7.3

    code-projects Real State Services normalHomeRent.php sql injection

    A security flaw has been discovered in code-projects Real State Services 1.0. This affects an unknown function of the file /normalHomeRent.php. Performing a manipulation of the argument loc results in sql injection. It is possible to initiate the attack remot…

  • High 7.3

    code-projects Real State Services normalHomeSale.php sql injection

    A vulnerability was identified in code-projects Real State Services 1.0. The impacted element is an unknown function of the file /normalHomeSale.php. Such manipulation of the argument loc leads to sql injection. The attack may be performed from remote. The ex…

  • High 7.3

    code-projects Smart Parking System parkings.php sql injection

    A vulnerability has been found in code-projects Smart Parking System 1.0. The affected element is an unknown function of the file /parkings/parkings.php. Such manipulation of the argument street/city/status leads to sql injection. The attack can be executed r…

  • High 7.3

    code-projects Online Examination head.php sql injection

    A vulnerability was determined in code-projects Online Examination 1.0. Affected by this issue is some unknown functionality of the file head.php. Executing a manipulation of the argument uname/password can lead to sql injection. It is possible to launch the …

  • High 7.3

    code-projects Internship Management System Employer Login Endpoint login.php sql injection

    A security vulnerability has been detected in code-projects Internship Management System 1.0. The impacted element is an unknown function of the file employer/login.php of the component Employer Login Endpoint. The manipulation of the argument email/password …

  • High 7.3

    code-projects Online Job Portal login.php sql injection

    A vulnerability was found in code-projects Online Job Portal 1.0. The affected element is an unknown function of the file login.php. Performing a manipulation of the argument txtUser/txtPass results in sql injection. The attack may be initiated remotely. The …

  • High 7.3

    code-projects Online Voting System saveVote.php test_input sql injection

    A vulnerability was detected in code-projects Online Voting System 1.0. Impacted is the function test_input of the file /saveVote.php. Performing a manipulation of the argument voterName/voterEmail/voterID/selectedCandidate results in sql injection. The attac…

  • High 7.3

    code-projects Online Voting System Login authentication.php test_input sql injection

    A security vulnerability has been detected in code-projects Online Voting System up to 0.x/1.0. This issue affects the function test_input of the file /authentication.php of the component Login. Such manipulation of the argument adminUserName/adminPassword le…

  • High 7.3

    code-projects Real State Services single-list_sale.php add sql injection

    A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. …

  • High 7.3

    code-projects Online Music Site Search.php sql injection

    A vulnerability was determined in code-projects Online Music Site 1.0. This issue affects some unknown processing of the file /Frontend/Search.php. This manipulation of the argument Category causes sql injection. It is possible to initiate the attack remotely…

  • High 7.3

    code-projects Online Music Site AdminDeleteAlbum.php sql injection

    A vulnerability was found in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminDeleteAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remot…

  • High 7.3

    code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection

    A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. This affects an unknown part of the file checkUser.php of the component POST Parameter Handler. The manipulation of the argument Username leads to sql injection. The atta…

  • High 7.3
    CVE-2026-11344 Public exploit

    code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload

    A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload.…

  • High 7.3

    code-projects Hotel and Tourism Reservation System details.php sql injection

    A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to sql injection. The attack can be launched remotely. The exploi…

  • High 7.3

    code-projects Student Admission System index.php sql injection

    A flaw has been found in code-projects Student Admission System 1.0. Affected is an unknown function of the file /index.php. This manipulation of the argument eid/did causes sql injection. The attack is possible to be carried out remotely. The exploit has bee…

  • High 7.3
    CVE-2026-10290 Public exploit

    code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection

    A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler. Executing a manipulation of the argument tour can lead to sql in…

  • High 7.3
    CVE-2026-10288 Public exploit

    code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication

    A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Password leads to improper a…

  • High 7.3

    code-projects Real State Services Login loginuser.php sql injection

    A vulnerability has been found in code-projects Real State Services 1.0. This impacts an unknown function of the file /loginuser.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely…

  • High 7.3
    CVE-2026-10243 Public exploit

    code-projects Smart Parking System Admin Endpoint missing authentication

    A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit…

  • High 7.3

    code-projects Online Hospital Management System login_1.php login_user sql injection

    A flaw has been found in code-projects Online Hospital Management System 1.php. This impacts the function login_user of the file login_1.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The…

  • High 7.3

    code-projects Online Hospital Management System patient.php sql injection

    A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patient.php. Such manipulation of the argument editid leads to sql injection. The attack…

  • High 7.3

    code-projects Online Music Site AdminEditAlbum.php sql injection

    A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminEditAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remo…

  • High 7.3
    CVE-2026-10110 Public exploit

    code-projects Student Details Management System index.php sql injection

    A vulnerability was detected in code-projects Student Details Management System 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument roll results in sql injection. The attack is possible to be carried out rem…

  • High 7.3

    code-projects Project Management System Login chk.php sql injection

    A security vulnerability has been detected in code-projects Project Management System 1.0. Affected is an unknown function of the file chk.php of the component Login. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The…

  • High 7.3

    code-projects Feedback System checklogin.php sql injection

    A security vulnerability has been detected in code-projects Feedback System 1.0. Impacted is an unknown function of the file /admin/checklogin.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. T…

  • High 7.3

    code-projects Online Hospital Management System viewappointment.php sql injection

    A vulnerability was determined in code-projects Online Hospital Management System 1.0. This affects an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out re…

  • High 8.8

    code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow

    A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the function setWiFiMultipleConfig in the library /lib/cste_modules/wireless.so of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument wepkey2 results i…

  • High 7.3

    code-projects Online Lot Reservation System loginuser.php sql injection

    A vulnerability has been found in code-projects Online Lot Reservation System up to 1.0. The impacted element is an unknown function of the file /loginuser.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate…

  • High 7.3
    CVE-2026-7070 Public exploit

    code-projects Inventory Management System Login sql injection

    A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The expl…

  • High 7.3

    code-projects Employee Management System Endpoint eprocess.php sql injection

    A vulnerability was detected in code-projects Employee Management System 1.0. This vulnerability affects unknown code of the file /370project/process/eprocess.php of the component Endpoint. Performing a manipulation of the argument pwd results in sql injectio…

  • High 7.3
    CVE-2026-6183 Public exploit

    code-projects Simple Content Management System index.php sql injection

    A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitat…

  • High 7.3
    CVE-2026-6182 Public exploit

    code-projects Simple Content Management System login.php sql injection

    A vulnerability was identified in code-projects Simple Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /web/admin/login.php. Such manipulation of the argument User leads to sql injection. The attack may be…

  • High 7.3

    code-projects Faculty Management System subject-print.php sql injection

    A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file /subject-print.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now …

  • High 7.3

    code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection

    A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects some unknown processing of the file /util/UpdateVehicleFunction.php. The manipulation of the argument VEHICLE_ID leads to sql injection. The…