Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-116623 code-projects Simple Content Management System Admin welcome.php authorization — Simple Content Management System CWE-862 7.3 High 2026-10-27
CVE-2026-108956 code-projects Online Reviewer System User Update btn_functions.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-10-13
CVE-2026-108948 code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes — Online Reviewer System CWE-915 5.4 Medium 2026-10-13
CVE-2026-108938 code-projects Matrimonial System matrimony.sql file access — Matrimonial System CWE-552 5.3 Medium 2026-10-12
CVE-2026-108937 code-projects Online Ticket Reservation System medallion.sql file information disclosure — Online Ticket Reservation System CWE-538 5.3 Medium 2026-10-12
CVE-2026-105188 code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting — Human Resource Management System CWE-79 3.5 Low 2026-10-05
CVE-2026-105173 code-projects Human Resource Management Event Creation EventStore.php cross site scripting — Human Resource Management CWE-79 3.5 Low 2026-10-05
CVE-2026-101105 code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection — Matrimonial System CWE-89 6.3 Medium 2026-09-28
CVE-2026-93980 code-projects Internship Management System Admin Login Form login.php sql injection — Internship Management System CWE-89 7.3 High 2026-09-20
CVE-2026-93979 code-projects Internship Management System login.php sql injection — Internship Management System CWE-89 7.3 High 2026-09-20
CVE-2026-93978 code-projects Internship Management System login.php sql injection — Internship Management System CWE-89 7.3 High 2026-09-20
CVE-2026-93977 code-projects Assessment Management add-single-mark.php cross site scripting — Assessment Management CWE-79 3.5 Low 2026-09-20
CVE-2026-93976 code-projects Assessment Management add-user.php cross site scripting — Assessment Management CWE-79 2.4 Low 2026-09-20
CVE-2026-93975 code-projects Assessment Management User Editing edit-user.php cross site scripting — Assessment Management CWE-79 2.4 Low 2026-09-20
CVE-2026-92926 code-projects Matrimonial System partner_preference.php writepartnerprefs sql injection — Matrimonial System CWE-89 7.3 High 2026-09-17
CVE-2026-92366 code-projects Matrimonial System Regular Search search.php sql injection — Matrimonial System CWE-89 7.3 High 2026-09-16
CVE-2026-91854 code-projects Record Management System reg.php cross site scripting — Record Management System CWE-79 4.3 Medium 2026-09-15
CVE-2026-86519 code-projects Student Crud Operation Backup File card_activation.sql information disclosure — Student Crud Operation CWE-200 5.3 Medium 2026-09-08
CVE-2026-86518 code-projects Student Crud Operation edit.php sql injection — Student Crud Operation CWE-89 6.3 Medium 2026-09-08
CVE-2026-86302 code-projects Hospital Information System SQL Database Backup File his.sql information disclosure — Hospital Information System CWE-200 5.3 Medium 2026-09-07
CVE-2026-86301 code-projects Hospital Information System Patient Management editPatient.php cross site scripting — Hospital Information System CWE-79 3.5 Low 2026-09-07
CVE-2026-86217 code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosure — Hotel and Tourism Reservation in PHP CWE-200 5.3 Medium 2026-09-06
CVE-2026-86216 code-projects Hotel and Tourism Reservation in PHP details.php cross site scripting — Hotel and Tourism Reservation in PHP CWE-79 4.3 Medium 2026-09-06
CVE-2026-86181 code-projects Task Management System User Profile Update UpdateUserProfile.php cross site scripting — Task Management System CWE-79 3.5 Low 2026-09-06
CVE-2026-86180 code-projects Task Management System In PHP Login index.php sql injection — Task Management System In PHP CWE-89 7.3 High 2026-09-06
CVE-2026-86179 code-projects Daily Expense Manager Database Backup exp_ak.sql information disclosure — Daily Expense Manager CWE-200 5.3 Medium 2026-09-06
CVE-2026-86168 code-projects Content Management System login.php sql injection — Content Management System CWE-89 7.3 High 2026-09-06
CVE-2026-85643 code-projects Online Shopping System adduser.php mysqli_query sql injection — Online Shopping System CWE-89 4.7 Medium 2026-09-04
CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure — Vehicle Management System CWE-200 5.3 Medium 2026-09-04
CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection — Vehicle Management System CWE-89 7.3 High 2026-09-04

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.