Skip to content
OpenAdvisories

Vendor

code-projects

1,383 known vulnerabilities.

583 results · Clear filters · Feed

  • Medium 6.3

    code-projects College Management System student.php unrestricted upload

    A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. This affects an unknown part of the file /Admin/student.php. The manipulation of the argument profile_image leads to unrestricted upload. It is possib…

  • Medium 6.3

    code-projects Payroll Management System update_employee.php sql injection

    A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file update_employee.php. The manipulation of the argument emp_type leads to sql injection. The …

  • Medium 6.3

    code-projects Payroll Management System add_deductions.php sql injection

    A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add_deductions.php. The manipulation of the argument bir leads to sql injection. The attack may be…

  • Medium 5.5

    code-projects Human Resource Management System Account.go Index improper authorization

    A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. …

  • Medium 6.3

    code-projects Real Estate Property Management System InsertFeedback.php sql injection

    A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /InsertFeedback.php. The manipulation of the argument txtName/txtEmail/txtMobile/txtFeedback leads t…

  • Medium 4.7

    code-projects Online Class and Exam Scheduling System salut_del.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salut_del.php. The manipulation of the argument id leads to sql injection. It is poss…

  • Medium 4.7

    code-projects Online Class and Exam Scheduling System activate.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql inject…

  • Medium 6.3

    code-projects Blood Bank Management System add_donor.php sql injection

    A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the file /user_dashboard/add_donor.php. The manipulation leads to sql injection. It is possible to initiate the attack rem…

  • Medium 4.7

    code-projects Blood Bank Management System add_city.php sql injection

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_city.php. The manipulation leads to sql injection. The attack may be launch…

  • Medium 6.3

    code-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument txtName…

  • Medium 4.3

    code-projects Online Ticket Reservation System passenger.php cross site scripting

    A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The …

  • Medium 4.7

    code-projects Blood Bank Management System edit_state.php sql injection

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_state.php. The manipulation of the argument state_id leads to sql…

  • Medium 4.7

    code-projects Blood Bank Management System delete_bloodGroup.php sql injection

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_bloodGroup.php. The manipulation of the argument blood_id leads…

  • Medium 4.7

    code-projects Blood Bank Management System delete_members.php sql injection

    A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/delete_members.php. The manipulation of the argument member_id leads to sql injection. It is possible t…

  • Medium 6.3

    code-projects Blood Bank Management System delete_requester.php sql injection

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_dashboard/delete_requester.php. The manipulation of the argument requester_id leads to sql…

  • Medium 6.3

    code-projects Blood Bank Management System view_donor.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /user_dashboard/view_donor.php. The manipulation of the argument donor_id leads to sql injection. It is…

  • Medium 6.3

    code-projects Real Estate Property Management System ajax_state.php sql injection

    A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax_state.php. The manipulation of the argument StateName as part of String …

  • Medium 6.3

    code-projects Real Estate Property Management System ajax_city.php sql injection

    A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax_city.php. The manipulation of the argument CityName leads to sql injection. It is possibl…

  • Medium 6.3

    code-projects Real Estate Property Management System CustomerReport.php sql injection

    A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument city lead…

  • Medium 6.3

    code-projects Real Estate Property Management System search.php sql injection

    A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /search.php. The manipulation of the argument StateName/CityName/AreaName/CatId leads to sql injection.…

  • Medium 6.3

    code-projects Wazifa System control.php sql injection

    A vulnerability classified as critical was found in code-projects Wazifa System 1.0. Affected by this vulnerability is an unknown functionality of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack can be…

  • Medium 6.3

    code-projects Real Estate Property Management System load_user-profile.php sql injection

    A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /_parse/load_user-profile.php. The manipulation of the argument userh…

  • Medium 5.3

    code-projects Police FIR Record Management System Delete Record stack-based overflow

    A vulnerability classified as critical was found in code-projects Police FIR Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Delete Record Handler. The manipulation leads to stack-based buffer overflow…

  • Medium 5.3

    code-projects Police FIR Record Management System Add Record stack-based overflow

    A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management System 1.0. This issue affects some unknown processing of the component Add Record Handler. The manipulation leads to stack-based buffer overflo…

  • Medium 5.3

    code-projects Vehicle Parking Management System Authentication login stack-based overflow

    A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overf…

  • Medium 6.3

    code-projects Job Recruitment load\_user-profile.php sql injection

    A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /\_parse/load\_user-profile.php. The manipulation of the argument userhash leads to sql injection. It is possible to initiate …

  • Medium 6.3

    code-projects Chat System add_chatroom.php sql injection

    A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/add_chatroom.php. The manipulation of the argument chatname/chatpass leads to sql injection. The attack may be …

  • Medium 6.3

    code-projects Job Recruitment _call_job_search_ajax.php sql injection

    A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/_call_job_search_ajax.php. The manipulation of the argument n leads to sql injection. It is possible to init…

  • Medium 6.3

    code-projects Chat System addnewmember.php sql injection

    A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. Th…

  • Medium 6.3

    code-projects Simple Plugins Car Rental Management approve.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql …

  • Medium 4.3

    code-projects Job Recruitment _call_job_search_ajax.php cross site scripting

    A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as problematic. This issue affects some unknown processing of the file _call_job_search_ajax.php. The manipulation of the argument job_type leads to cross site scripting. The at…

  • Medium 6.3

    code-projects Fantasy-Cricket update.php sql injection

    A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unknown function of the file /dash/update.php. The manipulation of the argument uname leads to sql injection. It is possible to launch the attac…

  • Medium 6.3

    code-projects Chat System leaveroom.php sql injection

    A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/leaveroom.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely…

  • Medium 5.3

    code-projects Train Ticket Reservation System Login Form stack-based overflow

    A vulnerability, which was classified as critical, was found in code-projects Train Ticket Reservation System 1.0. This affects an unknown part of the component Login Form. The manipulation of the argument username leads to stack-based buffer overflow. Attack…

  • Medium 4.7

    code-projects Content Management System Publish News Page publishnews.php unrestricted upload

    A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to u…

  • Medium 6.3

    code-projects Online Bike Rental System Change Image unrestricted upload

    A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Change Image Handler. The manipulation leads to unrestricted upload. The attack may be l…

  • Medium 6.3

    code-projects Online Book Shop subcat.php sql injection

    A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched…

  • Medium 6.3

    code-projects Online Book Shop search_result.php sql injection

    A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /search_result.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotel…

  • Medium 6.3

    code-projects Online Book Shop process_login.php sql injection

    A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /process_login.php. The manipulation of the argument usernm leads to sql injection. The attack may be initia…

  • Medium 6.3

    code-projects Online Book Shop detail.php sql injection

    A vulnerability was found in code-projects Online Book Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotel…