Carmelo vulnerabilities
We track 6 vulnerabilities in Carmelo products across 4 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on March 22, 2026.
Latest Carmelo vulnerabilities
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file all-tickets.php. The manipulation of the argument Status results in sql injection. It is possible to launch the atta
- 7.5 High severity
Simple Food Ordering System: Direct Request
A security vulnerability has been detected in code-projects Simple Food Ordering System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /food/sql/food.sql of the component Database Backup Handler. The manipulation leads to fil
- 9.8 Critical severity
Computer Laboratory System: Improper Neutralization of Special Elements used in an SQL Command
code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field on the login page can bypass login attempts.
- 7.3 High severity
Computer Laboratory System: Unrestricted Upload of File with Dangerous Type
code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions.
- 8.8 High severity
Food Review System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in code-projects Food Review System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/approve_reservation.php. The manipulation of the argument occasion leads to sql injection. The attack ma
- 7.8 High severity
Computer Science Time Table System: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php.