Skip to content
OpenAdvisories

Vendor

code-projects

1,383 known vulnerabilities.

583 results · Clear filters · Feed

  • Medium 6.3

    code-projects Automated Voting System Admin Login sql injection

    A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit ha…

  • Medium 4.3

    code-projects E-Commerce Site search.php cross site scripting

    A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input <video/src=x onerror=alert(document.cookie)> …

  • Medium 6.3

    code-projects Library Management System index.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to launch the …

  • Medium 4.3

    code-projects E-Commerce Website user_signup.php cross site scripting

    A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file user_signup.php. The manipulation of the argument firstname with the input <video/src=x onerror=alert(document.domain)> …

  • Medium 6.3

    code-projects E-Commerce Website sql injection

    A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file product_details.php?prod_id=11. The manipulation of the argument prod_id leads to sql i…

  • Medium 4.7

    code-projects E-Commerce Website index_search.php sql injection

    A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the a…

  • Medium 6.3

    code-projects Water Billing System addbill.php sql injection

    A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown part of the file /addbill.php. The manipulation of the argument owners_id leads to sql injection. It is possible to initiate the attack re…

  • Medium 4.7

    code-projects Faculty Management System crud.php sql injection

    A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the file /admin/php/crud.php. This manipulation of the argument fieldname/tablename causes sql injection. The attack is possible to be carried…

  • Medium 6.3

    code-projects Admission Management System student_avatar.php unrestricted upload

    A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file student_avatar.php. The manipulation leads to unrestricted upload. The attack may be la…

  • Medium 6.3

    code-projects Agro-School Management System exam-delete.php sql injection

    A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injecti…

  • Medium 6.3

    code-projects Agro-School Management System loaddata.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown functionality of the file loaddata.php. The manipulation of the argument subject/course leads to sql i…

  • Medium 6.3

    code-projects Supplier Management System Picture btn_functions.php unrestricted upload

    A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an unknown function of the file btn_functions.php of the component Picture Handler. The manipulation leads to unrestricted upload. It is possibl…

  • Medium 6.3

    code-projects Agro-School Management System btn_functions.php doUpdateQuestion sql injection

    A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btn_functions.php. The manipulation of the argument question_id leads to sql injection. It is possi…

  • Medium 6.3

    code-projects Agro-School Management System index.php sql injection

    A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch…

  • Medium 6.3

    code-projects Agro-School Management System Attachment Image btn_functions.php unrestricted upload

    A vulnerability was found in code-projects Agro-School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file btn_functions.php of the component Attachment Image Handler. The manipulation leads to unrestricted…

  • Medium 6.3

    code-projects Bus Dispatch and Information System delete_bus.php sql injection

    A vulnerability classified as critical has been found in code-projects Bus Dispatch and Information System 1.0. Affected is an unknown function of the file delete_bus.php. The manipulation of the argument busid leads to sql injection. It is possible to launch…

  • Medium 6.3

    code-projects Simple Photo Gallery unrestricted upload

    A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-229282 is the identifier a…

  • Medium 6.3

    code-projects Bus Dispatch and Information System adminHome.php sql injection

    A vulnerability was found in code-projects Bus Dispatch and Information System 1.0. It has been classified as critical. This affects an unknown part of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. It is possible …

  • Medium 6.3

    code-projects Bus Dispatch and Information System view_branch.php sql injection

    A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file view_branch.php. The manipulation of the argument branchid leads to sql injection. …

  • Medium 6.3

    code-projects Bus Dispatch and Information System view_admin.php sql injection

    A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file view_admin.php. The manipulation of the argument adminid leads to sql in…

  • Medium 6.3

    code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload

    A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the att…

  • Medium 6.3

    code-projects Simple Art Gallery adminHome.php sql injection

    A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can …

  • Medium 6.3
    CVE-2023-1498 Public exploit

    code-projects Responsive Hotel Site Newsletter Log messages.php sql injection

    A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. …