Vulnerabilidades em code-projects

1.383 resultados
Análise Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2025-3243MEDIUMcode-projects Patient Record Management System dental_form.php sql injectionEPSS 0.6%CVE-2024-11660MEDIUMcode-projects Farmacia usuario.php cross site scriptingEPSS 0.6%CVE-2025-5985MEDIUMcode-projects School Fees Payment System improper authenticationEPSS 0.6%CVE-2024-11099MEDIUMcode-projects Job Recruitment login.php sql injectionEPSS 0.6%CVE-2024-0474HIGHcode-projects Dormitory Management System login.php sql injectionEPSS 0.6%CVE-2023-2773MEDIUMcode-projects Bus Dispatch and Information System view_admin.php sql injectionEPSS 0.6%CVE-2025-8234MEDIUMcode-projects Online Ordering System delete_member.php sql injectionEPSS 0.6%CVE-2025-8232MEDIUMcode-projects Online Ordering System delete_user.php sql injectionEPSS 0.6%CVE-2025-8233MEDIUMcode-projects Online Ordering System user.php sql injectionEPSS 0.6%CVE-2025-8235MEDIUMcode-projects Online Ordering System product.php sql injectionEPSS 0.6%CVE-2024-0466MEDIUMcode-projects Employee Profile Management System file_table.php sql injectionEPSS 0.6%CVE-2025-0967MEDIUMcode-projects Chat System add_chatroom.php sql injectionEPSS 0.6%CVE-2025-3565MEDIUMhuanfenz/code-projects StudentManager Announcement Management Section uploadArticle.do unrestricted uploadEPSS 0.6%CVE-2025-8495MEDIUMcode-projects Intern Membership Management System edit_admin_query.php sql injectionEPSS 0.6%CVE-2025-8494MEDIUMcode-projects Intern Membership Management System delete_student.php sql injectionEPSS 0.6%CVE-2025-8502MEDIUMcode-projects Online Medicine Guide changepass.php sql injectionEPSS 0.6%CVE-2023-3339MEDIUMcode-projects Agro-School Management System exam-delete.php sql injectionEPSS 0.6%CVE-2025-10841MEDIUMcode-projects Online Bidding System weweee.php sql injectionEPSS 0.6%CVE-2025-10802MEDIUMcode-projects Online Bidding System remove.php sql injectionEPSS 0.6%CVE-2025-8500MEDIUMcode-projects Human Resource Integrated System action.php sql injectionEPSS 0.6%