Skip to content
OpenAdvisories

Vendor

code-projects

1,383 known vulnerabilities.

1,383 results · Feed

  • Low 3.5

    code-projects Point of Sales and Inventory Management System checkout.php cross site scripting

    A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /main/checkout.php. The manipulation of the argument pt leads to cros…

  • Low 3.5

    code-projects Faculty Management System yearlevel.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the argument Year Level/Secti…

  • Low 2.4

    code-projects Faculty Management System subjects.php cross site scripting

    A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/pages/subjects.php. The manipulation of the argument Description/Units leads to c…

  • High 7.3

    code-projects Matrimonial Site register.php register sql injection

    A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vulnerability is the function register of the file /register.php. The manipulation leads to sql injection. The attack can be launched remotely.…

  • High 7.3

    code-projects Matrimonial Site sql injection

    A vulnerability was found in code-projects Matrimonial Site 1.0. It has been classified as critical. Affected is an unknown function of the file /auth/auth.php?user=1. The manipulation of the argument username leads to sql injection. It is possible to launch …

  • Medium 6.3

    code-projects Admission Management System student_avatar.php unrestricted upload

    A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file student_avatar.php. The manipulation leads to unrestricted upload. The attack may be la…

  • Medium 6.3

    code-projects Agro-School Management System exam-delete.php sql injection

    A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injecti…

  • Medium 6.3

    code-projects Agro-School Management System loaddata.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown functionality of the file loaddata.php. The manipulation of the argument subject/course leads to sql i…

  • Medium 6.3

    code-projects Supplier Management System Picture btn_functions.php unrestricted upload

    A vulnerability classified as critical has been found in code-projects Supplier Management System 1.0. Affected is an unknown function of the file btn_functions.php of the component Picture Handler. The manipulation leads to unrestricted upload. It is possibl…

  • Medium 6.3

    code-projects Agro-School Management System btn_functions.php doUpdateQuestion sql injection

    A vulnerability classified as critical has been found in code-projects Agro-School Management System 1.0. Affected is the function doUpdateQuestion of the file btn_functions.php. The manipulation of the argument question_id leads to sql injection. It is possi…

  • Medium 6.3

    code-projects Agro-School Management System index.php sql injection

    A vulnerability was found in code-projects Agro-School Management System 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument password leads to sql injection. It is possible to launch…

  • Medium 6.3

    code-projects Agro-School Management System Attachment Image btn_functions.php unrestricted upload

    A vulnerability was found in code-projects Agro-School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file btn_functions.php of the component Attachment Image Handler. The manipulation leads to unrestricted…

  • Low 3.5

    code-projects Agro-School Management System btn_functions.php doAddQuestion cross site scripting

    A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as problematic. This vulnerability affects the function doAddQuestion of the file btn_functions.php. The manipulation of the argument Question leads to cross site…

  • Medium 6.3

    code-projects Bus Dispatch and Information System delete_bus.php sql injection

    A vulnerability classified as critical has been found in code-projects Bus Dispatch and Information System 1.0. Affected is an unknown function of the file delete_bus.php. The manipulation of the argument busid leads to sql injection. It is possible to launch…

  • Medium 6.3

    code-projects Simple Photo Gallery unrestricted upload

    A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-229282 is the identifier a…

  • Medium 6.3

    code-projects Bus Dispatch and Information System adminHome.php sql injection

    A vulnerability was found in code-projects Bus Dispatch and Information System 1.0. It has been classified as critical. This affects an unknown part of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. It is possible …

  • Medium 6.3

    code-projects Bus Dispatch and Information System view_branch.php sql injection

    A vulnerability was found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file view_branch.php. The manipulation of the argument branchid leads to sql injection. …

  • Medium 6.3

    code-projects Bus Dispatch and Information System view_admin.php sql injection

    A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file view_admin.php. The manipulation of the argument adminid leads to sql in…

  • Medium 6.3

    code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload

    A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file add_room.php. The manipulation leads to unrestricted upload. It is possible to launch the att…

  • Low 3.5

    code-projects Simple Art Gallery adminHome.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument about_info leads to cross site scrip…

  • Medium 6.3

    code-projects Simple Art Gallery adminHome.php sql injection

    A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can …

  • Medium 6.3
    CVE-2023-1498 Public exploit

    code-projects Responsive Hotel Site Newsletter Log messages.php sql injection

    A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. …

  • Low 3.5

    SourceCodester/code-projects Online Boat Reservation System POST Parameter login.php cross site scripting

    A vulnerability has been found in SourceCodester/code-projects Online Boat Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /boat/login.php of the component POST Parameter Handler. Th…