Skip to content
OpenAdvisories

Vendor

code-projects

1,383 known vulnerabilities.

583 results · Clear filters · Feed

  • Medium 6.3

    code-projects Online Bus Reservation System print.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Online Bus Reservation System 1.0. Affected by this issue is some unknown functionality of the file /print.php. The manipulation of the argument ID leads to sql injection. The …

  • Medium 6.3

    code-projects Patient Record Management System edit_xpatient.php sql injection

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_xpatient.php. The manipulation of the argument lastname leads to sql injection. It is possible to la…

  • Medium 5.3

    code-projects School Billing System searchrec stack-based overflow

    A vulnerability classified as critical was found in code-projects School Billing System 1.0. This vulnerability affects the function searchrec. The manipulation of the argument Name leads to stack-based buffer overflow. It is possible to launch the attack on …

  • Medium 5.3

    code-projects Product Management System add_item stack-based overflow

    A vulnerability, which was classified as critical, has been found in code-projects Product Management System 1.0. Affected by this issue is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. An attack …

  • Medium 5.3

    code-projects Simple Movie Ticket Booking System changeprize stack-based overflow

    A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function changeprize. The manipulation of the argument prize leads to stack-based buffer overflow. The attack needs…

  • Medium 5.3

    code-projects Student Information Management System cancel stack-based overflow

    A vulnerability was found in code-projects Student Information Management System 1.0 and classified as critical. Affected by this issue is the function cancel. The manipulation of the argument first_name/last_name leads to stack-based buffer overflow. The att…

  • Medium 5.3

    code-projects Theater Seat Booking System cancel stack-based overflow

    A vulnerability has been found in code-projects Theater Seat Booking System 1.0 and classified as critical. Affected by this vulnerability is the function cancel. The manipulation of the argument cancelcustomername leads to stack-based buffer overflow. It is …

  • Medium 5.3

    code-projects Clothing Store Management System add_item stack-based overflow

    A vulnerability, which was classified as critical, was found in code-projects Clothing Store Management System up to 1.0. Affected is the function add_item. The manipulation of the argument st.productname leads to stack-based buffer overflow. Attacking locall…

  • Medium 5.3

    code-projects Prison Management System Prison_Mgmt_Sys addrecord stack-based overflow

    A vulnerability classified as critical was found in code-projects Prison Management System 1.0. This vulnerability affects the function addrecord of the component Prison_Mgmt_Sys. The manipulation of the argument filename leads to stack-based buffer overflow.…

  • Medium 5.3

    code-projects Train Ticket Reservation System reservation stack-based overflow

    A vulnerability was found in code-projects Train Ticket Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is the function Reservation of the component Ticket Reservation. The manipulation of the argument Name leads to st…

  • Medium 4.4

    code-projects ATM Banking moneyWithdraw logic error

    A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit…

  • Medium 5.3

    code-projects Personal Diary Management System New Record addrecord stack-based overflow

    A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based bu…

  • Medium 6.3

    code-projects Patient Record Management System edit_spatient.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /edit_spatient.php. The manipulation of the argument ID leads to sql injection. It is possible to ini…

  • Medium 6.3

    code-projects Patient Record Management System edit_fpatient.php sql injection

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file /edit_fpatient.php. The manipulation of the argument ID leads to sql injection. It is possible to launch t…

  • Medium 6.3

    ZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted upload

    A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload.…

  • Medium 6.3

    ZeroWdd/code-projects studentmanager getTeacherList improper authorization

    A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The expl…

  • Medium 6.3

    JamesZBL/code-projects db-hospital-drug ShiroConfig.java improper authorization

    A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ShiroConfig.java. The manipulation leads to improper authorization. The attack may be launche…

  • Medium 4.7

    huanfenz/code-projects StudentManager Announcement Management Section uploadArticle.do unrestricted upload

    A vulnerability classified as critical was found in huanfenz/code-projects StudentManager 1.0. This vulnerability affects unknown code of the file /upload/uploadArticle.do of the component Announcement Management Section. The manipulation of the argument File…

  • Medium 4.3

    huanfenz/code-projects StudentManager Teacher String improper authorization

    A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the…

  • Medium 6.3

    code-projects Patient Record Management System edit_dpatient.php sql injection

    A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /edit_dpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initi…

  • Medium 6.3

    code-projects Patient Record Management System dental_pending.php sql injection

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_pending.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate t…

  • Medium 6.3

    godcheese/code-projects Nimrod FileRestController.java unrestricted upload

    A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by this issue is some unknown functionality of the file FileRestController.java. The manipulation of the argument File leads to unrestricted uplo…

  • Medium 6.3

    godcheese/code-projects Nimrod ViewMenuCategoryRestController.java searchAllByName sql injection

    A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searchAllByName of the file ViewMenuCategoryRestController.java. The manipulation of the argument Name leads to sql injectio…

  • Medium 4.3

    1902756969/code-projects IKUN_Library Borrow MvcConfig.java addInterceptors access control

    A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerability affects the function addInterceptors of the file MvcConfig.java of the component Borrow Handler. The manipulation leads to improper a…

  • Medium 6.3

    code-projects Patient Record Management System dental_not.php sql injection

    A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_not.php. The manipulation of the argument itr_no leads to sql injection. It is possible to ini…

  • Medium 6.3

    code-projects Patient Record Management System birthing_record.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Patient Record Management System 1.0. Affected by this issue is some unknown functionality of the file /birthing_record.php. The manipulation of the argument itr_no leads to sq…

  • Medium 6.3
    CVE-2025-3243 Public exploit

    code-projects Patient Record Management System dental_form.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dental_form.php. The manipulation of the argument itr_no/dental_no leads to sql injection. The …

  • Medium 6.3

    code-projects Patient Record Management System birthing_print.php sql injection

    A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /birthing_print.php. The manipulation of the argument itr_no/birth_id leads to sql injection. It is possible …

  • Medium 6.3

    code-projects Patient Record Management System birthing_pending.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /birthing_pending.php. The manipulation of the argument birth_id leads to sql inje…

  • Medium 6.3

    code-projects Patient Record Management System add_patient.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /add_patient.php. The manipulation of the argument itr_no leads to sql in…

  • Medium 6.3

    code-projects Patient Record Management System xray_print.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xray_print.php. The manipulation of the argument itr_no leads to sql injection. It is possible to…

  • Medium 6.3

    code-projects Patient Record Management System birthing_form.php sql injection

    A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /birthing_form.php. The manipulation of the argument birth_id leads to sql injection. The attack…

  • Medium 6.3

    code-projects Hospital Management System doctor-specilization.php sql injection

    A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/doctor-specilization.php. The manipulation of the argument doctorspecilization leads to sql i…

  • Medium 5.3

    code-projects Product Management System Search Product Menu search_item stack-based overflow

    A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affects the function search_item of the component Search Product Menu. The manipulation of the argument target leads to stack-based buffer over…

  • Medium 5.3

    code-projects Bus Reservation System Login Form login buffer overflow

    A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launc…

  • Medium 6.3

    code-projects Payroll Management System add_overtime.php sql injection

    A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /add_overtime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the atta…

  • Medium 6.3

    code-projects Payroll Management System add_employee.php sql injection

    A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add_employee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to…

  • Medium 6.3

    code-projects Payroll Management System view_account.php sql injection

    A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_account.php. The manipulation of the argument salary_rate leads to sql injection. The attack may …

  • Medium 6.3

    code-projects Payroll Management System update_account.php sql injection

    A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file update_account.php. The manipulation of the argument deduction leads to sql injection. It is possible to ini…

  • Medium 6.3

    code-projects Payroll Management System delete.php sql injection

    A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /delete.php. The manipulation of the argument emp_id leads to sql injection. The attack may b…