Fabian vulnerabilities
We track 18 vulnerabilities in Fabian products across 13 products. 18 are rated high or critical, and none are known to be exploited. The most recent was published on February 18, 2026.
Latest Fabian vulnerabilities
- 9.8 Critical severity
Scholars Tracking System: Improper Neutralization of Special Elements used in an SQL Command
code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints lack authentication checks and directly concatenate user-supplie
- 8.8 High severity
Scholars Tracking System: Unrestricted Upload of File with Dangerous Type
code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ directo
- 9.8 Critical severity
Mobile Shop Management System: Improper Control of Generation of Code
code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php via the Name, Address, email, UserName, Password, confirm_password, Role, Branch, and Activate parameters.
- 9.8 Critical severity
Class and Exam Timetable Management: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection. Remote
- 9.8 Critical severity
Class and Exam Timetable Management: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results i
- 8.8 High severity
Simple Food Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched re
- 9.8 Critical severity
Online Complaint Site: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection.
- 9.8 Critical severity
E-Banking System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php of the component POST Parameter Handler. The manipulation of the argument username/password leads to sql injection. It
- 9.8 Critical severity
Online Course Registration: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotel
- 9.8 Critical severity
Online Course Registration: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been
- 9.8 Critical severity
E-Commerce Website: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/admin_product_details.php. Such manipulation of the argument prod_id leads to sql injection. The attack may be launched remotely
- 7.8 High severity
Jewelery Store Management system: Out-of-bounds Write
A vulnerability, which was classified as critical, has been found in code-projects Jewelery Store Management system 1.0. Affected by this issue is some unknown functionality of the component Search Item View. The manipulation of the argument str2 leads to stac
- 9.8 Critical severity
Simple Plugins Car Rental Management: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql i
- 8.2 High severity
Hostel Management Site: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remote
- 7.2 High severity
Blood Bank System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Blood Bank System 1.0. This affects an unknown part of the file /admin/blood/update/B-.php. The manipulation of the argument Bloodname leads to sql injection. It is possible to initiate the
- 9.8 Critical severity
Online Faculty Clearance: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/admin_view_info.php of the component HTTP POST Request Handler. The manipulatio
- 9.8 Critical severity
Online Faculty Clearance: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designee_view_status.php of the component HTTP POST Request Handler. T
- 9.8 Critical severity
Online Faculty Clearance: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to