Vulnerabilidades em code-projects

1.383 resultados
Análise Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2024-8366MEDIUMcode-projects Pharmacy Management System Update My Profile Page index.php cross site scriptingEPSS 0.5%CVE-2025-0200MEDIUMcode-projects Point of Sales and Inventory Management System search_num.php sql injectionEPSS 0.5%CVE-2025-4472MEDIUMcode-projects Departmental Store Management System bill stack-based overflowEPSS 0.5%CVE-2023-7075LOWcode-projects Point of Sales and Inventory Management System checkout.php cross site scriptingEPSS 0.5%CVE-2026-1422MEDIUMcode-projects Online Examination System Login Page index.php sql injectionEPSS 0.5%CVE-2025-6484MEDIUMcode-projects Online Shopping Store action.php sql injectionEPSS 0.5%CVE-2025-4743MEDIUMcode-projects Employee Record System getData.php sql injectionEPSS 0.5%CVE-2025-5632MEDIUMcode-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injectionEPSS 0.5%CVE-2025-5633MEDIUMcode-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injectionEPSS 0.5%CVE-2025-5704MEDIUMcode-projects Real Estate Property Management System User.php sql injectionEPSS 0.5%CVE-2025-11036MEDIUMcode-projects E-Commerce Website admin_account_update.php sql injectionEPSS 0.5%CVE-2025-6834MEDIUMcode-projects Inventory Management System editPayment.php sql injectionEPSS 0.5%CVE-2025-7587MEDIUMcode-projects Online Appointment Booking System cover.php sql injectionEPSS 0.5%CVE-2024-12979MEDIUMcode-projects Job Recruitment _all_edits.php cn_update cross site scriptingEPSS 0.5%CVE-2024-12980MEDIUMcode-projects Job Recruitment _all_edits.php fln_update cross site scriptingEPSS 0.5%CVE-2024-10196MEDIUMcode-projects Pharmacy Management System add_new_invoice.php sql injectionEPSS 0.5%CVE-2023-1500LOWcode-projects Simple Art Gallery adminHome.php cross site scriptingEPSS 0.5%CVE-2025-3587MEDIUMZeroWdd/code-projects studentmanager getTeacherList improper authorizationEPSS 0.5%CVE-2025-2037MEDIUMcode-projects Blood Bank Management System delete_requester.php sql injectionEPSS 0.5%CVE-2025-14620MEDIUMcode-projects Student File Management System login_query.php sql injectionEPSS 0.5%