Vulnerabilidades em code-projects

1.383 resultados
Análise Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2024-9034MEDIUMcode-projects Patient Record Management System login.php sql injectionEPSS 0.6%CVE-2024-12487MEDIUMcode-projects Online Class and Exam Scheduling System room_update.php sql injectionEPSS 0.6%CVE-2025-6777MEDIUMcode-projects Food Distributor Site process_login.php sql injectionEPSS 0.6%CVE-2024-12488MEDIUMcode-projects Online Class and Exam Scheduling System subject_update.php sql injectionEPSS 0.6%CVE-2024-12486MEDIUMcode-projects Online Class and Exam Scheduling System rank_update.php sql injectionEPSS 0.6%CVE-2025-0300MEDIUMcode-projects Online Book Shop subcat.php sql injectionEPSS 0.6%CVE-2024-12485MEDIUMcode-projects Online Class and Exam Scheduling System department.php sql injectionEPSS 0.6%CVE-2024-12489MEDIUMcode-projects Online Class and Exam Scheduling System term.php sql injectionEPSS 0.6%CVE-2024-10350MEDIUMcode-projects Hospital Management System add-doctor.php sql injectionEPSS 0.6%CVE-2025-0563MEDIUMcode-projects Fantasy-Cricket update.php sql injectionEPSS 0.6%CVE-2024-13092MEDIUMcode-projects Job Recruitment Job Post search_ajax.php sql injectionEPSS 0.6%CVE-2024-9086MEDIUMcode-projects Restaurant Reservation System filter.php sql injectionEPSS 0.6%CVE-2024-10700MEDIUMcode-projects University Event Management System submit.php sql injectionEPSS 0.6%CVE-2024-11076MEDIUMcode-projects Job Recruitment activation.php sql injectionEPSS 0.6%CVE-2024-10418MEDIUMcode-projects Blood Bank Management System infoAdd.php sql injectionEPSS 0.6%CVE-2025-0874MEDIUMcode-projects Simple Plugins Car Rental Management approve.php sql injectionEPSS 0.6%CVE-2024-13093MEDIUMcode-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injectionEPSS 0.6%CVE-2025-3593MEDIUMZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted uploadEPSS 0.6%CVE-2026-0589MEDIUMcode-projects Online Product Reservation System Administration Backend improper authenticationEPSS 0.6%CVE-2024-12937MEDIUMcode-projects Simple Admin Panel addVariationController.php sql injectionEPSS 0.6%