Vulnerabilidades em code-projects

1.383 resultados
Análise Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2024-11246MEDIUMcode-projects Farmacia adicionar-cliente.php cross site scriptingEPSS 0.6%CVE-2024-0504LOWcode-projects Simple Online Hotel Reservation System Make a Reservation Page add_reserve.php cross site scriptingEPSS 0.6%CVE-2025-7612MEDIUMcode-projects Mobile Shop login.php sql injectionEPSS 0.6%CVE-2025-5710MEDIUMcode-projects Real Estate Property Management System InsertState.php sql injectionEPSS 0.6%CVE-2025-8270MEDIUMcode-projects Exam Form Submission delete_s2.php sql injectionEPSS 0.6%CVE-2025-8340MEDIUMcode-projects Intern Membership Management System Error Message fill_details.php cross site scriptingEPSS 0.6%CVE-2025-8271MEDIUMcode-projects Exam Form Submission delete_s3.php sql injectionEPSS 0.6%CVE-2025-7541MEDIUMcode-projects Online Appointment Booking System get_town.php sql injectionEPSS 0.6%CVE-2026-1443MEDIUMcode-projects Online Music Site AdminDeleteUser.php sql injectionEPSS 0.6%CVE-2025-8272MEDIUMcode-projects Exam Form Submission update_fst.php sql injectionEPSS 0.6%CVE-2025-5705MEDIUMcode-projects Real Estate Property Management System Property.php sql injectionEPSS 0.6%CVE-2025-0335MEDIUMcode-projects Online Bike Rental System Change Image unrestricted uploadEPSS 0.6%CVE-2025-5709MEDIUMcode-projects Real Estate Property Management System InsertCategory.php sql injectionEPSS 0.6%CVE-2025-5711MEDIUMcode-projects Real Estate Property Management System InsertCity.php sql injectionEPSS 0.6%CVE-2025-7174MEDIUMcode-projects Library System teacher-issue-book.php sql injectionEPSS 0.6%CVE-2025-8273MEDIUMcode-projects Exam Form Submission update_s8.php sql injectionEPSS 0.6%CVE-2025-7467MEDIUMcode-projects Modern Bag product-detail.php sql injectionEPSS 0.6%CVE-2024-10740MEDIUMcode-projects E-Health Care System consulting_detail.php sql injectionEPSS 0.6%CVE-2025-6843MEDIUMcode-projects Simple Photo Gallery upload-photo.php unrestricted uploadEPSS 0.6%CVE-2024-11968MEDIUMcode-projects Farmacia pagamento.php sql injectionEPSS 0.6%