Code-Projects
Vulnerability activity for Code-Projects: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 13
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.3HighOct 27, 2026Code-Projects Simple Content Management System Auth bypass / access controlCVE-2026-116623A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
- 4.3MediumJun 29, 2026Code-Projects Online Music Site XSSCVE-2026-13567A security flaw has been discovered in code-projects Online Music Site 1.0. This affects an unknown part of the file /Frontend/Feedback.php of the component POST Request Handler. The manipulation of the argument fname/femail/faddress/fmessage results in cross site scripting. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
- 7.3HighJun 29, 2026Code-Projects Real State Services Code / command injectionCVE-2026-13559A weakness has been identified in code-projects Real State Services 1.0. Impacted is an unknown function of the file /single-list_sale.php?action=add. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
- 6.3MediumMay 4, 2026Code-Projects BloodBank Managing System Auth bypass / access controlCVE-2026-7732A vulnerability was detected in code-projects BloodBank Managing System 1.0. The impacted element is an unknown function of the file request_blood.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used.
- 6.3MediumMay 4, 2026Code-Projects BloodBank Managing System Code / command injectionCVE-2026-7731A security vulnerability has been detected in code-projects BloodBank Managing System 1.0. The affected element is an unknown function of the file get_state.php. The manipulation of the argument G_STATE_ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
- 6.3MediumMay 4, 2026Code-Projects Gym Management System In PHP Code / command injectionCVE-2026-7716A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0. This vulnerability affects unknown code of the file /index.php. Performing a manipulation of the argument day results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
- 4.3MediumApr 10, 2026Code-Projects Simple Laundry System XSSCVE-2026-6032A vulnerability was found in code-projects Simple Laundry System 1.0. This impacts an unknown function of the file /checkcheckout.php. Performing a manipulation of the argument serviceId results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
- 4.3MediumApr 10, 2026Code-Projects Online Library Management System Information disclosureCVE-2026-6000A vulnerability was found in code-projects Online Library Management System 1.0. Affected is an unknown function of the file /sql/library.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been made public and could be used.
- 7.3HighApr 9, 2026Code-Projects Simple IT Discussion Forum Code / command injectionCVE-2026-5985A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0. The affected element is an unknown function of the file /crud.php. The manipulation of the argument user_Id results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.
- 7.3HighApr 9, 2026Code-Projects Simple IT Discussion Forum Code / command injectionCVE-2026-5961A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the file /topic-details.php. The manipulation of the argument post_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
- 5.3MediumApr 6, 2026Code-Projects Online Application System for Admission Information disclosureCVE-2026-5650A vulnerability was found in code-projects Online Application System for Admission 1.0. Impacted is an unknown function of the file /enrollment/database/oas.sql. Performing a manipulation results in insecure storage of sensitive information. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
- 2.4LowMar 27, 2026Code-Projects Online Reviewer System XSSCVE-2026-4972A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.php. Such manipulation of the argument Description leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
- 7.3HighJan 2, 2026Code-Projects content management system Code / command injectionCVE-2026-0546A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of the argument Value causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Top products
- Simple IT Discussion Forum2 CVEs in the last year
- BloodBank Managing System2 CVEs in the last year
- Simple Laundry System1 CVE in the last year
- Simple Content Management System1 CVE in the last year
- Real State Services1 CVE in the last year
- Online Reviewer System1 CVE in the last year
- Online Music Site1 CVE in the last year
- Online Library Management System1 CVE in the last year
- Online Application System for Admission1 CVE in the last year
- Gym Management System In PHP1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.