CodeZips vulnerabilities
We track 76 vulnerabilities in CodeZips products across 21 products. 76 are rated high or critical, and none are known to be exploited. The most recent was published on March 27, 2025.
Latest CodeZips vulnerabilities
- 8.8 High severity
Online Institute Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in Codezips Online Institute Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edit_user.php. The manipulation of the argument image leads to unrestricted up
- 8.8 High severity
Online Institute Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in Codezips Online Institute Management System 1.0. Affected is an unknown function of the file /manage_website.php. The manipulation of the argument website_image leads to unrestricted upload. It is
- 9.8 Critical severity
Hospital Appointment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /editBranchResult.php. The manipulation of the argument ID leads to sql injection. The attack
- 9.8 Critical severity
Hospital Appointment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack ma
- 9.8 Critical severity
Free Exam Hall Seating Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in Codezips Free Exam Hall Seating Management System 1.0. This issue affects some unknown processing of the file /pages/save_user.php. The manipulation of the argument image leads to unrestricte
- 9.8 Critical severity
Online Institute Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in Codezips Online Institute Management System up to 1.0. This vulnerability affects unknown code of the file /profile.php. The manipulation of the argument old_image leads to unrestricted upload. The attack can
- 9.8 Critical severity
Online Institute Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in Codezips Online Institute Management System 1.0. This affects an unknown part of the file /pages/save_user.php. The manipulation of the argument image leads to unrestricted upload. It is possible to init
- 9.8 Critical severity
Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /productsadd.php. The manipulation of the argument id/name leads to sql injection. It is possible to initiate the
- 9.8 Critical severity
ISP Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips ISP Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file pay.php. The manipulation of the argument customer leads to sql injection. The attack may be launched r
- 9.8 Critical severity
Free Exam Hall Seating Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch th
- 9.8 Critical severity
Free Exam Hall Seating Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack ma
- 9.8 Critical severity
Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file birdsupdate.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attac
- 9.8 Critical severity
Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file birdsadd.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack r
- 9.8 Critical severity
Online Institute Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack m
- 9.8 Critical severity
Free Exam Hall Seating Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiate
- 9.8 Critical severity
Hospital Appointment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Codezips Hospital Appointment System 1.0. This affects an unknown part of the file /loginAction.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate th
- 9.8 Critical severity
Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an unknown function of the file /deletebird.php. The manipulation of the argument t1 leads to sql injection. It is possible to launch the attac
- 9.8 Critical severity
Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Codezips Pet Shop Management System 1.0. This issue affects some unknown processing of the file /animalsupdate.php. The manipulation of the argument id leads to sql injection. The attack may
- 9.8 Critical severity
Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /deleteanimal.php. The manipulation of the argument t1 leads to sql injection. The attack can be initiat
- 9.8 Critical severity
Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects an unknown part of the file /animalsadd.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attac
- 9.8 Critical severity
Sales Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /addcustind.php. The manipulation of the argument refno leads to sql injection. The attack may be
- 9.8 Critical severity
Sales Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /addcustcom.php. The manipulation of the argument refno leads to sql injection. The atta
- 9.8 Critical severity
Sales Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Sales Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addstock.php. The manipulation of the argument prodtype leads to sql injection. It is possible to launch the att
- 9.8 Critical severity
Sales Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Codezips Sales Management System 1.0. This affects an unknown part of the file deletecustind.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotel
- 9.8 Critical severity
Sales Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Sales Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file checkuser.php. The manipulation of the argument name leads to sql injection. The attack may be la
- 9.8 Critical severity
Sales Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Sales Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file deletecustcom.php. The manipulation of the argument id leads to sql injection. The attac
- 7.2 High severity
Tourist Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/change-image.php. The manipulation of the argument packageimage leads to unrestricted upload
- 7.2 High severity
Tourist Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in Codezips Tourist Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/create-package.php. The manipulation of the argument packageimage leads to unrest
- 9.8 Critical severity
Pharmacy Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Codezips Pharmacy Management System 1.0. Affected is an unknown function of the file product/update.php. The manipulation of the argument id leads to sql injection. It is possible to launch the at
- 9.8 Critical severity
Pharmacy Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Codezips Pharmacy Management System 1.0. This issue affects some unknown processing of the file product/register.php. The manipulation of the argument category leads to sql injection. The att
- 9.8 Critical severity
Online Shopping Portal: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in Codezips Online Shopping Portal 1.0. This issue affects some unknown processing of the file /update-image1.php. The manipulation of the argument productimage1 leads to unrestricted upload. Th
- 9.8 Critical severity
Online Shopping Portal: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Codezips Online Shopping Portal 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack r
- 9.8 Critical severity
Online Shopping Portal: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as problematic was found in Codezips Online Shopping Portal 1.0. Affected by this vulnerability is an unknown functionality of the file insert-product.php. The manipulation of the argument productimage1/productimage2/productimage3 le
- 7.3 High severity
Internal Marks Calculation: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Codezips Internal Marks Calculation 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely.
- 8.8 High severity
E-Commerce Site: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, has been found in Codezips E-Commerce Site 1.0. Affected by this issue is some unknown functionality of the file admin/editproduct.php. The manipulation of the argument profilepic leads to unrestricted upload.
- 8.8 High severity
E-Commerce Site: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects unknown code of the file admin/addproduct.php. The manipulation of the argument profilepic leads to unrestricted upload. The attack can be ini