Codeprojects vulnerabilities
We track 29 vulnerabilities in Codeprojects products across 10 products. 29 are rated high or critical, and none are known to be exploited. The most recent was published on April 27, 2025.
Latest Codeprojects vulnerabilities
- 9.8 Critical severity
News Publishing Site Dashboard: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been rated as critical. This issue affects some unknown processing of the file /edit-category.php of the component Edit Category Page. The manipulation of the argument categor
- 8.8 High severity
News Publishing Site Dashboard: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in codeprojects News Publishing Site Dashboard 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /api.php. The manipulation of the argument cat_id leads to sql injection. The attack can be init
- 7.5 High severity
Patient Record Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in codeprojects Patient Record Management System 1.0. This affects an unknown part of the file /edit_rpatient.php.php. The manipulation of the argument id/lastname leads to sql injection. It is possi
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/combo.php. The manipulation of the argument del leads to sql inje
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/assign_save.php. The manipulation of the argument ID leads to sql injection. It is possibl
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/reservation_update.php. The manipulation of the argument ID leads to sql injection. The
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/payment_save.php. The manipulation of the argument ID leads to sql injection. The atta
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file /admin/reservation_view.php. The manipulation of the argument ID leads to sql injection. It is possib
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/combo_update.php. The manipulation of the argument ID leads to sq
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user_update.php. The manipulation of the argument ID leads to sql injection.
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/user_save.php. The manipulation of the argument Name leads to sql injection. It is possible to lau
- 7.3 High severity
Online Restaurant Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/member_update.php. The manipulation of the argument ID leads to sql injection. The a
- 7.3 High severity
Online Restaurant Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The a
- 7.3 High severity
Online Restaurant Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/category_update.php. The manipulation of the argument ID leads to sql injection. It is possib
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/category_save.php. The manipulation of the argument Category leads to sql inje
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menu_update.php. The manipulation of the argument menu leads to sql
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. It is possible
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affects some unknown processing of the file /payment_save.php. The manipulation of the argument mode leads to sql injection. T
- 9.8 Critical severity
Online Restaurant Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown code of the file /reservation_save.php. The manipulation of the argument first leads to sql injection. The attack can b
- 7.8 High severity
Product Management System: Buffer Copy without Checking Size of Input
A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a req
- 7.5 High severity
Farmacia: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Farmacia 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /visualizer-forneccedor.chp. The manipulation of the argument id leads to sql injection. The attack can be initiated
- 8.8 High severity
Responsive Hotel Site: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected by this issue is some unknown functionality of the file /admin/room.php. The manipulation of the argument troom leads to sql injection. The a
- 9.8 Critical severity
Simple Car Rental System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be
- 8.8 High severity
health_care_hospital_management_system: Improper Neutralization of Special Elements used in an SQL Command
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter.
- 8.8 High severity
health_care_hospital_management_system: Improper Neutralization of Special Elements used in an SQL Command
CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Patient Info module via the searvalu parameter.
- 7.5 High severity
Farmacia: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in codeprojects Farmacia 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument usario/senha leads to sql injection. It is possible to launch the attack remotely
- 9.8 Critical severity
Pharmacy Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The atta
- 9.8 Critical severity
Online Driving School: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely.
- 9.8 Critical severity
Online Driving School: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in codeprojects Online Driving School. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registration.php. The manipulation leads to unrestricted upload. The attack may be launched remote