Vulnerabilidades en code-projects

1375 resultados
Análisis Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2025-11600MEDIUMcode-projects Simple Food Ordering System editcategory.php sql injectionEPSS 0.3%CVE-2025-11612MEDIUMcode-projects Simple Food Ordering System addproduct.php sql injectionEPSS 0.3%CVE-2025-11613MEDIUMcode-projects Simple Food Ordering System addcategory.php sql injectionEPSS 0.3%CVE-2025-12314MEDIUMcode-projects Food Ordering System deleteitem.php sql injectionEPSS 0.3%CVE-2025-4061MEDIUMcode-projects Clothing Store Management System add_item stack-based overflowEPSS 0.3%CVE-2025-4029MEDIUMcode-projects Personal Diary Management System New Record addrecord stack-based overflowEPSS 0.3%CVE-2025-7951MEDIUMcode-projects Public Chat Room send_message.php cross site scriptingEPSS 0.3%CVE-2025-4062MEDIUMcode-projects Theater Seat Booking System cancel stack-based overflowEPSS 0.3%CVE-2025-4063MEDIUMcode-projects Student Information Management System cancel stack-based overflowEPSS 0.3%CVE-2026-14701MEDIUMcode-projects Internship Management System Password Change Endpoint change_password.php sql injectionEPSS 0.3%CVE-2026-5256MEDIUMcode-projects Simple Laundry System Parameter modify.php sql injectionEPSS 0.3%CVE-2026-14706MEDIUMcode-projects Online Examination Quiz Creation Feature update.php sql injectionEPSS 0.3%CVE-2026-4784MEDIUMcode-projects Simple Laundry System Parameter checkcheckout.php sql injectionEPSS 0.3%CVE-2026-5257MEDIUMcode-projects Simple Laundry System Parameter delstaffinfo.php sql injectionEPSS 0.3%CVE-2026-14658MEDIUMcode-projects Assessment Management marking-scheme.php sql injectionEPSS 0.3%CVE-2026-14657MEDIUMcode-projects Assessment Management Database Query marking-scheme.php sql injectionEPSS 0.3%CVE-2026-5017MEDIUMcode-projects Simple Food Order System Parameter all-tickets.php sql injectionEPSS 0.3%CVE-2025-11358MEDIUMcode-projects Simple Banking System removeuser.php sql injectionEPSS 0.3%CVE-2025-9841MEDIUMcode-projects Mobile Shop Management System AddNewProduct.php unrestricted uploadEPSS 0.3%CVE-2025-8859MEDIUMcode-projects eBlog Site File Upload save-slider.php unrestricted uploadEPSS 0.3%