Skip to content
OpenAdvisories

Vendor

code-projects

1,383 known vulnerabilities.

583 results · Clear filters · Feed

  • Medium 4.3

    code-projects Intern Membership Management System Error Message fill_details.php cross site scripting

    A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file fill_details.php of the component Error Message Handler. The manipulation of the argum…

  • Medium 4.3

    code-projects Simple Car Rental System cross-site request forgery

    A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been di…

  • Medium 6.3

    code-projects Online Ordering System product.php unrestricted upload

    A vulnerability classified as critical has been found in code-projects Online Ordering System 1.0. Affected is an unknown function of the file /admin/product.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch th…

  • Medium 6.3

    code-projects Voting System candidates_add.php unrestricted upload

    A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/candidates_add.php. The manipulation of the argument photo leads to unrestricted upload. The attac…

  • Medium 6.3

    code-projects Document Management System insert.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0. This issue affects some unknown processing of the file /insert.php. The manipulation of the argument uploaded_file leads to unrestricted upload.…

  • Medium 6.3

    code-projects Food Review System approve_reservation.php sql injection

    A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/approve_reservation.php. The manipulation of the argument occasion leads to sql injection. The attack m…

  • Medium 6.3

    code-projects Public Chat Room send_message.php sql injection

    A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical. This vulnerability affects unknown code of the file send_message.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remo…

  • Medium 6.3
    CVE-2025-8018 Public exploit

    code-projects Food Ordering Review System reservation_page.php sql injection

    A vulnerability was found in code-projects Food Ordering Review System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/reservation_page.php. The manipulation of the argument reg_Id leads to s…

  • Medium 4.3

    code-projects E-Commerce Site cross-site request forgery

    A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed …

  • Medium 6.3

    code-projects Online Ordering System edit_product.php unrestricted upload

    A vulnerability was found in code-projects Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/edit_product.php. The manipulation of the argument image leads to unrestricted upload. The atta…

  • Medium 6.3

    code-projects Patient Record Management System xray_form.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /xray_form.php. The manipulation of the argument itr_no leads to sql injection. The attack c…

  • Medium 6.3

    code-projects Voting System positions_edit.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/positions_edit.php. The manipulation of the argument ID leads to sql injection. The a…

  • Medium 6.3

    code-projects Voting System positions_row.php sql injection

    A vulnerability classified as critical was found in code-projects Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions_row.php. The manipulation of the argument ID leads to sql injection. The attack can be…

  • Medium 6.3
    CVE-2025-7558 Public exploit

    code-projects Voting System positions_add.php sql injection

    A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack…

  • Medium 6.3

    code-projects Voting System voters_row.php sql injection

    A vulnerability has been found in code-projects Voting System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/voters_row.php. The manipulation of the argument ID leads to sql injection. The attack …

  • Medium 6.3

    code-projects Voting System voters_edit.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the file /admin/voters_edit.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attac…

  • Medium 6.3

    code-projects Voting System voters_add.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/voters_add.php. The manipulation of the argument firstname/lastname leads to sql injection. The…

  • Medium 6.3

    code-projects Chat System update_account.php sql injection

    A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/update_account.php. The manipulation of the argument musername leads to sql injection. The attack may be initia…

  • Medium 4.7

    code-projects Simple Car Rental System add_cars.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/add_cars.php. The manipulation of the argument image leads to unrestricted upload. T…

  • Medium 6.3

    code-projects Library System profile.php unrestricted upload

    A vulnerability classified as critical has been found in code-projects Library System 1.0. This affects an unknown part of the file /user/teacher/profile.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the …

  • Medium 6.3

    code-projects Library System profile.php unrestricted upload

    A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/student/profile.php. The manipulation of the argument image leads to unrestricted upload. The …

  • Medium 6.3

    code-projects/Fabian Ros Library Management System profile_update.php unrestricted upload

    A vulnerability was found in code-projects/Fabian Ros Library Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/profile_update.php. The manipulation of the argument photo leads to unrestri…

  • Medium 6.3

    code-projects Library Management System student_edit_photo.php unrestricted upload

    A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. This affects an unknown part of the file /admin/student_edit_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is pos…

  • Medium 6.3

    code-projects Chat System send_message.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Chat System 1.0. Affected by this issue is some unknown functionality of the file /user/send_message.php. The manipulation of the argument msg leads to sql injection. The attac…

  • Medium 6.3

    code-projects Chat System addmember.php sql injection

    A vulnerability classified as critical was found in code-projects Chat System 1.0. Affected by this vulnerability is an unknown functionality of the file /user/addmember.php. The manipulation of the argument ID leads to sql injection. The attack can be launch…

  • Medium 6.3

    code-projects Chat System fetch_member.php sql injection

    A vulnerability classified as critical has been found in code-projects Chat System 1.0. Affected is an unknown function of the file /user/fetch_member.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotel…

  • Medium 6.3

    code-projects Chat System fetch_chat.php sql injection

    A vulnerability was found in code-projects Chat System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /user/fetch_chat.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated rem…

  • Medium 6.3

    code-projects Staff Audit System test.php unrestricted upload

    A vulnerability, which was classified as critical, was found in code-projects Staff Audit System 1.0. Affected is an unknown function of the file /test.php. The manipulation of the argument uploadedfile leads to unrestricted upload. It is possible to launch t…

  • Medium 6.3

    code-projects E-Commerce Site users_photo.php unrestricted upload

    A vulnerability was found in code-projects E-Commerce Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/users_photo.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to laun…

  • Medium 6.3

    code-projects Responsive Blog Site category.php sql injection

    A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated r…

  • Medium 6.3

    code-projects Responsive Blog Site single.php sql injection

    A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack re…

  • Medium 6.3

    code-projects Online Note Sharing Profile Image userprofile.php unrestricted upload

    A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Image Handler. The manipulation of the argument image leads to unre…

  • Medium 6.3

    code-projects Library System add-book.php unrestricted upload

    A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. The attack can be initiated …

  • Medium 6.3

    code-projects Movie Ticketing System ticketConfirmation.php sql injection

    A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may …

  • Medium 6.3

    code-projects Staff Audit System search_index.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /search_index.php. The manipulation of the argument Search leads to sql injection. The attack may…

  • Medium 6.3

    code-projects Staff Audit System update_index.php sql injection

    A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php. The manipulation of the argument updateid leads to sql injection. The attack can be initiated remo…

  • Medium 4.3

    code-projects Simple Forum forum_downloadfile.php path traversal

    A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be init…

  • Medium 6.3

    code-projects Simple Forum forum1.php sql injection

    A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forum1.php. The manipulation of the argument File leads to sql injection. The attack can be la…

  • Medium 6.3

    code-projects Simple Forum forum1.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in code-projects Simple Forum 1.0. This issue affects some unknown processing of the file /forum1.php. The manipulation of the argument File leads to unrestricted upload. The attack may be init…

  • Medium 6.3

    code-projects Simple Forum forum_edit.php sql injection

    A vulnerability classified as critical was found in code-projects Simple Forum 1.0. This vulnerability affects unknown code of the file /forum_edit.php. The manipulation of the argument iii leads to sql injection. The attack can be initiated remotely. The exp…