VYPR

Vendor CVEs

Fabian

All CVEs

484 total · sorted by risk
  • CVE-2025-6842MedJun 29, 2025
    risk 0.31cvss 4.7epss 0.00

    A vulnerability was found in code-projects Product Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit_user.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The…

  • CVE-2025-6841MedJun 29, 2025
    risk 0.31cvss 4.7epss 0.00

    A vulnerability has been found in code-projects Product Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit_product.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely.…

  • CVE-2025-6484MedJun 22, 2025
    risk 0.31cvss 4.7epss 0.00

    A vulnerability was found in code-projects Online Shopping Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /action.php. The manipulation of the argument cat_id/brand_id/keyword/proId/pid leads to sql injection. The attack…

  • CVE-2025-2392MedMar 17, 2025
    risk 0.31cvss 4.7epss 0.00

    A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/activate.php. The manipulation of the argument id leads to sql injection. The attack may…

  • CVE-2025-2389MedMar 17, 2025
    risk 0.31cvss 4.7epss 0.00

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_city.php. The manipulation leads to sql injection. The attack may be launched remotely. The…

  • CVE-2024-10350MedOct 24, 2024
    risk 0.31cvss 4.7epss 0.01

    A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated…

  • CVE-2023-7105MedFeb 29, 2024
    risk 0.31cvss 4.7epss 0.01

    A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an unknown function of the file index_search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The…

  • CVE-2025-4037MedApr 28, 2025
    risk 0.29cvss 4.4epss 0.00

    A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed…

  • CVE-2026-0586MedJan 5, 2026
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was detected in code-projects Online Product Reservation System 1.0. The affected element is an unknown function of the file handgunner-administrator/prod.php. Performing a manipulation of the argument cat results in cross site scripting. The attack is possible…

  • CVE-2025-15213MedDec 30, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id leads to improper authorization. The attack…

  • CVE-2025-13244MedNov 16, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was determined in code-projects Student Information System 2.0. The affected element is an unknown function of the file /register.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly…

  • CVE-2025-13119MedNov 13, 2025
    risk 0.28cvss 4.3epss 0.00

    A flaw has been found in Fabian Ros/SourceCodester Simple E-Banking System 1.0. This affects an unknown part. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been published and may be used.

  • CVE-2025-12335MedOct 28, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cross site scripting. The attack can be…

  • CVE-2025-12334MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument prod_name/prod_desc/prod_cost results in cross site scripting. It is possible to launch the attack remotely.…

  • CVE-2025-12333MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplier_add.php. The manipulation of the argument supp_name/supp_address leads to cross site scripting. It is possible to initiate the attack remotely.…

  • CVE-2025-12302MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was detected in code-projects Simple Food Ordering System 1.0. The affected element is an unknown function of the file /editproduct.php. Performing manipulation of the argument pname/category/price results in cross site scripting. The attack may be initiated…

  • CVE-2025-12300MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes cross site scripting. The attack can be initiated remotely. The exploit has…

  • CVE-2025-12299MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument pname/category/price results in cross site scripting. It is possible to launch the attack…

  • CVE-2025-12298MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was identified in code-projects Simple Food Ordering System 1.0. This affects an unknown part of the file /editcategory.php. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is…

  • CVE-2025-12283MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited.

  • CVE-2025-12244MedOct 27, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may be launched remotely. The exploit has been…

  • CVE-2025-11512MedOct 9, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/voters_add.php. The manipulation of the argument Firstname/Lastname/Platform results in cross site scripting. The attack can be executed…

  • CVE-2025-7756MedJul 17, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability classified as problematic has been found in code-projects E-Commerce Site 1.0. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and…

  • CVE-2025-6866MedJun 29, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability has been found in code-projects Simple Forum 1.0 and classified as critical. This vulnerability affects unknown code of the file /forum_downloadfile.php. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The…

  • CVE-2025-6569MedJun 24, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. Affected by this vulnerability is an unknown functionality of the file /student.php. The manipulation of the argument sname/contact/about/emailid/transcation_remark leads to…

  • CVE-2025-6473MedJun 22, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability, which was classified as problematic, was found in code-projects School Fees Payment System 1.0. This affects an unknown part of the file /fees.php. The manipulation of the argument transcation_remark leads to cross site scripting. It is possible to initiate the…

  • CVE-2025-6341MedJun 20, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability classified as problematic was found in code-projects School Fees Payment System 1.0. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public…

  • CVE-2025-2061MedMar 7, 2025
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be…

  • CVE-2024-12998MedDec 28, 2024
    risk 0.28cvss 4.3epss 0.00

    A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate…

  • CVE-2024-10605MedNov 1, 2024
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely.…

  • CVE-2024-10557MedOct 31, 2024
    risk 0.28cvss 4.3epss 0.01

    A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprofile.php. The manipulation leads to cross-site request forgery. The attack can be…

  • CVE-2024-10448MedOct 28, 2024
    risk 0.28cvss 4.3epss 0.00

    A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /file/delete.php. The manipulation of the argument bid leads to cross-site request forgery.…

  • CVE-2023-7108MedFeb 29, 2024
    risk 0.28cvss 4.3epss 0.01

    A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file user_signup.php. The manipulation of the argument firstname with the input <video/src=x onerror=alert(document.domain)> leads to cross site…

  • CVE-2023-7142MedDec 29, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has…

  • CVE-2023-7141MedDec 29, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/update-clients.php. The manipulation of the argument uid leads to sql injection. The exploit has been disclosed to the…

  • CVE-2023-7140MedDec 28, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the…

  • CVE-2023-7139MedDec 28, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/lname/email/contact…

  • CVE-2023-7124MedDec 28, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input <video/src=x onerror=alert(document.cookie)> leads to cross site…

  • CVE-2025-60308MedOct 10, 2025
    risk 0.27cvss 4.1epss 0.00

    code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie…

  • CVE-2025-29430MedMar 17, 2025
    risk 0.27cvss 4.1epss 0.00

    Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting (XSS) in /pages/room.php via the id and rome parameters.

  • CVE-2025-11609LowOct 11, 2025
    risk 0.24cvss 3.7epss 0.00

    A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptographic key . The attack can be initiated…

  • CVE-2026-2224LowFeb 9, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /system/system/admins/manage/users/btn_functions.php. The manipulation of the argument firstname results in cross site scripting. It is possible to launch the…

  • CVE-2026-1421LowJan 26, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in code-projects Online Examination System 1.0. Affected is an unknown function of the component Add Pages. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may…

  • CVE-2025-15052LowDec 24, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was detected in code-projects Student Information System 1.0. This vulnerability affects unknown code of the file /profile.php. Performing manipulation of the argument firstname/lastname results in cross site scripting. The attack is possible to be carried out…

  • CVE-2025-13245LowNov 16, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was identified in code-projects Student Information System 2.0. The impacted element is an unknown function of the file /editprofile.php. Such manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly…

  • CVE-2025-13202LowNov 15, 2025
    risk 0.23cvss 3.5epss 0.00

    A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /add_to_cart. Performing manipulation of the argument product_name results in cross site scripting. It is possible to initiate the attack remotely. The…

  • CVE-2025-11421LowOct 8, 2025
    risk 0.23cvss 3.5epss 0.00

    A flaw has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/candidates_edit.php. This manipulation of the argument Firstname/Lastname/Platform causes cross site scripting. Remote exploitation of the attack is possible.…

  • CVE-2025-11124LowSep 28, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The…

  • CVE-2025-10837LowSep 23, 2025
    risk 0.23cvss 3.5epss 0.00

    A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cross site scripting. The attack may be…

  • CVE-2025-8501LowAug 3, 2025
    risk 0.23cvss 3.5epss 0.00

    A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the argument content leads to cross site scripting. It is possible to…

Page 9 of 10