Vulnerabilidades en code-projects

1375 resultados
Análisis Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2026-5828MEDIUMcode-projects Simple IT Discussion Forum addcomment.php sql injectionEPSS 0.3%CVE-2026-86519MEDIUMcode-projects Student Crud Operation Backup File card_activation.sql information disclosureEPSS 0.3%CVE-2026-5824MEDIUMcode-projects Simple Laundry System userchecklogin.php sql injectionEPSS 0.3%CVE-2026-86179MEDIUMcode-projects Daily Expense Manager Database Backup exp_ak.sql information disclosureEPSS 0.3%CVE-2026-5150MEDIUMcode-projects Accounting System Parameter viewin_costumer.php sql injectionEPSS 0.3%CVE-2025-15213MEDIUMcode-projects Student File Management System File Download download.php improper authorizationEPSS 0.3%CVE-2026-6182MEDIUMcode-projects Simple Content Management System login.php sql injectionEPSS 0.3%CVE-2026-6183MEDIUMcode-projects Simple Content Management System index.php sql injectionEPSS 0.3%CVE-2026-10110MEDIUMcode-projects Student Details Management System index.php sql injectionEPSS 0.3%CVE-2025-6849MEDIUMcode-projects Simple Forum forum_edit1.php cross site scriptingEPSS 0.3%CVE-2026-82624MEDIUMcode-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosureEPSS 0.3%CVE-2025-11421MEDIUMcode-projects Voting System candidates_edit.php cross site scriptingEPSS 0.3%CVE-2026-86217MEDIUMcode-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosureEPSS 0.3%CVE-2026-86302MEDIUMcode-projects Hospital Information System SQL Database Backup File his.sql information disclosureEPSS 0.3%CVE-2025-5732MEDIUMcode-projects Traffic Offense Reporting System cross-site request forgeryEPSS 0.3%CVE-2025-13290MEDIUMcode-projects Simple Food Ordering System saveorder.php sql injectionEPSS 0.3%CVE-2025-14230MEDIUMcode-projects Daily Time Recording System add_payroll.php sql injectionEPSS 0.3%CVE-2026-6160MEDIUMcode-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosureEPSS 0.3%CVE-2025-14222MEDIUMcode-projects Employee Profile Management System print_personnel_report.php sql injectionEPSS 0.3%CVE-2026-5650MEDIUMcode-projects Online Application System for Admission oas.sql sensitive informationEPSS 0.3%