Vulnerabilidades em code-projects

1.282 resultados
Análise Vexday

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2026-5825MEDIUMcode-projects Simple Laundry System delmemberinfo.php cross site scriptingEPSS 0.4%CVE-2026-3705MEDIUMcode-projects Simple Flight Ticket Booking System Adminsearch.php sql injectionEPSS 0.4%CVE-2025-14640MEDIUMcode-projects Student File Management System save_student.php sql injectionEPSS 0.4%CVE-2025-14645MEDIUMcode-projects Student File Management System delete_user.php sql injectionEPSS 0.4%CVE-2025-14622MEDIUMcode-projects Student File Management System save_user.php sql injectionEPSS 0.4%CVE-2025-11512MEDIUMcode-projects Voting System voters_add.php cross site scriptingEPSS 0.4%CVE-2025-12300MEDIUMcode-projects Simple Food Ordering System addcategory.php cross site scriptingEPSS 0.4%CVE-2025-12335MEDIUMcode-projects E-Commerce Website supplier_update.php cross site scriptingEPSS 0.4%CVE-2025-1170MEDIUMcode-projects Real Estate Property Management System Category.php cross site scriptingEPSS 0.4%CVE-2025-12299MEDIUMcode-projects Simple Food Ordering System addproduct.php cross site scriptingEPSS 0.4%CVE-2025-12244MEDIUMcode-projects Simple E-Banking System register.php cross site scriptingEPSS 0.4%CVE-2025-11354MEDIUMcode-projects Online Hotel Reservation System addslideexec.php unrestricted uploadEPSS 0.4%CVE-2025-12334MEDIUMcode-projects E-Commerce Website product_add.php cross site scriptingEPSS 0.4%CVE-2025-12333MEDIUMcode-projects E-Commerce Website supplier_add.php cross site scriptingEPSS 0.4%CVE-2025-0529MEDIUMcode-projects Train Ticket Reservation System Login Form stack-based overflowEPSS 0.4%CVE-2025-3304MEDIUMcode-projects Patient Record Management System dental_not.php sql injectionEPSS 0.4%CVE-2025-0339MEDIUMcode-projects Online Bike Rental HTTP GET Request vehical-details.php cross site scriptingEPSS 0.4%CVE-2026-4581MEDIUMcode-projects Simple Laundry System Parameters checklogin.php sql injectionEPSS 0.4%CVE-2025-14195MEDIUMcode-projects Employee Profile Management System add_file_query.php unrestricted uploadEPSS 0.4%CVE-2025-8929MEDIUMcode-projects Medical Store Management System MainPanel.java sql injectionEPSS 0.4%