code-projects vulnerabilities
We track 1,064 vulnerabilities in code-projects products across 60+ products. 1,064 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest code-projects vulnerabilities
- 9.8 Critical severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file Source/librarian/user/student/lost-password.php. The manipulation of the argument email leads to sql
- 9.8 Critical severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the argument email/regno
- 9.8 Critical severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0. It has been classified as critical. Affected is an unknown function of the file Source/librarian/user/teacher/registration.php. The manipulation of the argument email/idno/phone/username leads to s
- 9.8 Critical severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0 and classified as critical. This issue affects some unknown processing of the file Source/librarian/user/teacher/login.php. The manipulation of the argument username/password leads to sql injection.
- 9.8 Critical severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/librarian/user/student/login.php. The manipulation of the argument username/password leads to sql injectio
- 8.8 High severity
Crime Reporting System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file police_add.php. The manipulation of the argument police_name/police_id/police_spec/password leads to sq
- 9.8 Critical severity
Crime Reporting System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Crime Reporting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file inchargelogin.php. The manipulation of the argument email/password leads to sql injection. The attack c
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/action/edit_chicken.php. The manipulation of the argument ref leads to sql injection.
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/action/new-feed.php. The manipulation of the argument type_feed leads to sql injection. It is p
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the argument ref leads to sql inj
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/add_con.php. The manipulation of the argument chicken leads to
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/add_con.php. The manipulation of the argument id leads to sql injection. It is po
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Fighting Cock Information System 1.0. This issue affects some unknown processing of the file admin/action/update_mother.php. The manipulation of the argument age_mother leads to
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Fighting Cock Information System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/edit_chicken.php. The manipulation of the argument id leads to sql injection. The at
- 9.8 Critical severity
Fighting Cock Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/action/update-deworm.php. The manipulation of the argument usage_deworm leads to sql inj
- 9.8 Critical severity
Dormitory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Dormitory Management System 1.0. Affected by this issue is some unknown functionality of the file modifyuser.php. The manipulation of the argument user_id leads to sql injection
- 9.8 Critical severity
Dormitory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack ca
- 9.8 Critical severity
Dormitory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php. The manipulation of the argument com leads to sql injection. It is possible to launch the attack re
- 7.5 High severity
Dormitory Management System: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The exp
- 9.8 Critical severity
Human Resource Integrated System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin_route/dec_service_credits.php. The manipulation of the argument date leads to sql inje
- 9.8 Critical severity
Human Resource Integrated System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been classified as critical. This affects an unknown part of the file /admin_route/inc_service_credits.php. The manipulation of the argument id leads to sql injection. It i
- 9.8 Critical severity
Human Resource Integrated System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file update_personal_info.php. The manipulation of the argument sex leads to sql injection.
- 9.8 Critical severity
Fighting Cock Information System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in code-projects Fighting Cock Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/action/new-father.php. The manipulation of the argument image leads t
- 9.8 Critical severity
Employee Profile Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file file_table.php. The manipulation of the argument per_id leads to sql injection. Th
- 9.8 Critical severity
Online Faculty Clearance: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file delete_faculty.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injecti
- 9.8 Critical severity
Online Faculty Clearance: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/admin_view_info.php of the component HTTP POST Request Handler. The manipulatio
- 9.8 Critical severity
Online Faculty Clearance: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designee_view_status.php of the component HTTP POST Request Handler. T
- 9.8 Critical severity
Online Faculty Clearance: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to
- 9.8 Critical severity
Faculty Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated rem
- 9.8 Critical severity
Simple Online Hotel Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. T
- 8.8 High severity
College Notes Gallery: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit ha
- 9.8 Critical severity
Client Details System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection.
- 9.8 Critical severity
Client Details System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has bee
- 9.8 Critical severity
Client Details System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument id leads to sql injection. The exploit has been
- 9.8 Critical severity
Client Details System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/
- 8.8 High severity
Client Details System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of the file /admin of the component HTTP POST Request Handler. The manipulation of the argument username leads to sql injectio
- 8.8 High severity
Client Details System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the component HTTP POST Request Handler. The manipulation of the argument uemail leads to sql
- 9.8 Critical severity
Intern Membership Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user_registration/ of the component User Registration. The manipulation of the argu
- 8.8 High severity
Voting System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the
- 8.8 High severity
Voting System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection.