Vulnerabilidades en code-projects

1375 resultados
Análisis Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2025-4890MEDIUMcode-projects Tourism Management System Login User LoginUser stack-based overflowEPSS 0.3%CVE-2025-4498MEDIUMcode-projects Simple Bus Reservation System Install Bus install stack-based overflowEPSS 0.3%CVE-2026-19998MEDIUMcode-projects Online Shopping System offersmail.php cross site scriptingEPSS 0.3%CVE-2025-4500MEDIUMcode-projects Hotel Management System Edit Room edit stack-based overflowEPSS 0.3%CVE-2025-4499MEDIUMcode-projects Simple Hospital Management System Add Information add stack-based overflowEPSS 0.3%CVE-2025-4888MEDIUMcode-projects Pharmacy Management System Add Order Details take_order buffer overflowEPSS 0.3%CVE-2026-19378MEDIUMcode-projects Task Management System CommentSave.php cross site scriptingEPSS 0.3%CVE-2025-2673MEDIUMcode-projects Payroll Management System home_employee.php cross site scriptingEPSS 0.3%CVE-2025-4891MEDIUMcode-projects Police Station Management System Display Record source.cpp display buffer overflowEPSS 0.3%CVE-2026-0566MEDIUMcode-projects Content Management System edit_posts.php unrestricted uploadEPSS 0.3%CVE-2025-4077MEDIUMcode-projects School Billing System searchrec stack-based overflowEPSS 0.3%CVE-2025-4068MEDIUMcode-projects Simple Movie Ticket Booking System changeprize stack-based overflowEPSS 0.3%CVE-2024-12186MEDIUMcode-projects Hotel Management System Available Room hotelnew.c stack-based overflowEPSS 0.3%CVE-2025-4069MEDIUMcode-projects Product Management System add_item stack-based overflowEPSS 0.3%CVE-2025-4059MEDIUMcode-projects Prison Management System Prison_Mgmt_Sys addrecord stack-based overflowEPSS 0.3%CVE-2024-12185MEDIUMcode-projects Hotel Management System Administrator Login Password stack-based overflowEPSS 0.3%CVE-2026-5018MEDIUMcode-projects Simple Food Order System Parameter register-router.php sql injectionEPSS 0.3%CVE-2026-4850MEDIUMcode-projects Simple Laundry System Parameter checkregisitem.php sql injectionEPSS 0.3%CVE-2026-3736MEDIUMcode-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injectionEPSS 0.3%CVE-2026-3735MEDIUMcode-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injectionEPSS 0.3%