Skip to content
Noroxi

code-projects records

436 published records for vendor code-projects.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 0.2%
Pre-auth RCE
16
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

436 records
  • CVE-2021-44092
    39Monitor

    An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form.

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · pharmacy managementJan 20, 2022

  • CVE-2023-37627
    39Monitor

    Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection.

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · online restaurant management systemJul 12, 2023

  • CVE-2023-41506
    39Monitor

    An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attack

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · student enrollmentFeb 26, 2024

  • CVE-2024-1830
    39Monitor

    code-projects Library System lost-password.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · library systemFeb 23, 2024

  • CVE-2023-41505
    39Monitor

    An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to e

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · student enrollmentMar 13, 2024

  • CVE-2023-48078
    39Monitor

    SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' para

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · simple crud functionalityNov 16, 2023

  • CVE-2023-1416
    39Monitor

    Simple Art Gallery adminHome.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · simple art galleryMar 15, 2023

  • CVE-2024-1829
    39Monitor

    code-projects Library System registration.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · library systemFeb 23, 2024

  • CVE-2024-25222
    39Monitor

    Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · task managerFeb 14, 2024

  • CVE-2024-1828
    39Monitor

    code-projects Library System registration.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · library systemFeb 23, 2024

  • CVE-2023-1499
    39Monitor

    code-projects Simple Art Gallery adminHome.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · simple art galleryMar 19, 2023

  • CVE-2024-0359
    39Monitor

    code-projects Simple Online Hotel Reservation System login.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · simple online hotel reservation systemJan 9, 2024

  • CVE-2024-1827
    39Monitor

    code-projects Library System login.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · library systemFeb 23, 2024

  • CVE-2024-25307
    39Monitor

    Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/booking.php?id=1."

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · cinema seat reservation systemFeb 9, 2024

  • CVE-2024-25220
    39Monitor

    Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · task managerFeb 14, 2024

  • CVE-2024-24095
    39Monitor

    Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · simple stock systemFeb 26, 2024

  • CVE-2024-0464
    39Monitor

    code-projects Online Faculty Clearance HTTP GET Request delete_faculty.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · online faculty clearanceJan 12, 2024

  • CVE-2024-25223
    39Monitor

    Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.ph

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · simple admin panelFeb 14, 2024

  • CVE-2024-0474
    39Monitor

    code-projects Dormitory Management System login.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · dormitory management systemJan 12, 2024

  • CVE-2024-34955
    39Monitor

    Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter.

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · budget managementMay 15, 2024

  • CVE-2024-0466
    39Monitor

    code-projects Employee Profile Management System file_table.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · employee profile management systemJan 12, 2024

  • CVE-2024-0468
    39Monitor

    code-projects Fighting Cock Information System new-father.php unrestricted upload

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · fighting cock information systemJan 12, 2024

  • CVE-2024-1826
    39Monitor

    code-projects Library System login.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · library systemFeb 23, 2024

  • CVE-2024-1820
    39Monitor

    code-projects Crime Reporting System inchargelogin.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · crime reporting systemFeb 23, 2024

  • CVE-2024-24093
    39Monitor

    SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Up

    CriticalCVSS 9.8No exploitEPSS 1%

    code-projects · scholars tracking systemMar 12, 2024