code-projects vulnerabilities
We track 1,064 vulnerabilities in code-projects products across 60+ products. 1,064 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2026.
Latest code-projects vulnerabilities
- 9.8 Critical severity
Online Appointment Booking System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The att
- 9.8 Critical severity
Computer Book Store: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Computer Book Store 1.0. Affected is an unknown function of the file /admin_delete.php. This manipulation of the argument bookisbn causes sql injection. It is possible to initiate the attack remotely. The exploit
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/delete_student.php. The manipulation of the argument stud_id results in sql injection. The attack may be performed from
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/delete_user.php. The manipulation of the argument user_id leads to sql injection. The attack is possible to be carried out r
- 9.8 Critical severity
Simple Attendance Record System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing manipulation of the argument student results in sql injection. Remote exploitation of the attack is p
- 7.2 High severity
Computer Laboratory System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in code-projects Computer Laboratory System 1.0. Impacted is an unknown function of the file technical_staff_pic.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The
- 7.2 High severity
Computer Laboratory System: Unrestricted Upload of File with Dangerous Type
A flaw has been found in code-projects Computer Laboratory System 1.0. This issue affects some unknown processing of the file admin/admin_pic.php. This manipulation of the argument image causes unrestricted upload. The attack may be initiated remotely. The exp
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/save_student.php. Executing manipulation of the argument stud_no can lead to sql injection. The attack may be launched rem
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The attack is possible to be c
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The attack can be executed r
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of the attack is possible.
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/login_query.php. Executing manipulation of the argument Username can lead to sql injection. The attack m
- 9.8 Critical severity
Student File Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login_query.php. Performing manipulation of the argument stud_no results in sql injection. The attack may be i
- 9.8 Critical severity
Prison Management System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The manipulation of the argument keyname leads to sql injection. It is possible to initiate the attack rem
- 8.8 High severity
Prison Management System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Prison Management System 2.0. This issue affects some unknown processing of the file /admin/search.php. Executing a manipulation of the argument keyname can lead to sql injection. The attack may be performed from
- 9.8 Critical severity
Class and Exam Timetable Management: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection. Remote
- 9.8 Critical severity
Class and Exam Timetable Management: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results i
- 9.8 Critical severity
Employee Profile Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection. The attack can be launched remotely. The exploi
- 9.8 Critical severity
Online Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection. It is possible to laun
- 9.8 Critical severity
Online Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /user_contact.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely.
- 9.8 Critical severity
Online Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user_school.php. The manipulation of the argument product_id results in sql injection. The attack may be performed from re
- 9.8 Critical severity
Simple Shopping Cart: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /adminlogin.php. The manipulation of the argument admin_username leads to sql injection. The attack is possible to be carried out remotely. Th
- 9.8 Critical severity
Simple Shopping Cart: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Admin/additems.php. Executing manipulation of the argument item_name can lead to sql injection. The attack can be executed remotel
- 9.8 Critical severity
Simple Shopping Cart: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file /Customers/settings.php. Performing manipulation of the argument user_id results in sql injection. Remote exploitation of the attack is pos
- 8.8 High severity
Daily Time Recording System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in code-projects Daily Time Recording System 4.5.0. The impacted element is an unknown function of the file /admin/add_payroll.php. Performing manipulation of the argument detail_Id results in sql injection. The attack can be initi
- 9.8 Critical severity
Simple Leave Manager: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Simple Leave Manager 1.0. Affected by this vulnerability is an unknown functionality of the file /request.php. Such manipulation of the argument staff_id leads to sql injection. The attack may be launched remotel
- 8.8 High severity
Employee Profile Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file /print_personnel_report.php. This manipulation of the argument per_id causes sql injection. The attack may be initiated remotely. The exp
- 9.8 Critical severity
Currency Exchange System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security flaw has been discovered in code-projects Currency Exchange System 1.0. The affected element is an unknown function of the file /editotheraccount.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate th
- 9.8 Critical severity
Currency Exchange System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is public
- 9.8 Critical severity
Currency Exchange System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewserial.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely.
- 9.8 Critical severity
Currency Exchange System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made
- 8.8 High severity
Question Paper Generator: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Question Paper Generator up to 1.0. This vulnerability affects unknown code of the file /selectquestionuser.php. This manipulation of the argument subid causes sql injection. Remote exploitation of the attack is possible.
- 8.8 High severity
Employee Profile Management System: Improper Access Control
A security flaw has been discovered in code-projects Employee Profile Management System 1.0. Impacted is an unknown function of the file /profiling/add_file_query.php. The manipulation of the argument per_file results in unrestricted upload. The attack may be
- 8.8 High severity
Employee Profile Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file /view_personnel.php. Executing a manipulation of the argument per_id can lead to sql injection. The attack can be launch
- 9.8 Critical severity
Question Paper Generator: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Question Paper Generator 1.0. This affects an unknown part of the file /signupscript.php of the component POST Parameter Handler. Executing manipulation of the argument Fname can lead to sql injection. The attack
- 9.8 Critical severity
Jonnys Liquor: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injectio
- 8.8 High severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed
- 8.8 High severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and cou
- 9.8 Critical severity
Library System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The expl
- 8.8 High severity
Blog Site: Incorrect Privilege Assignment
A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now publi