Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-4550 code-projects Simple Gym Management System func.php sql injection — Simple Gym Management System CWE-89 4.7 Medium 2026-03-22
CVE-2026-4533 code-projects Simple Food Ordering System all-tickets.php sql injection — Simple Food Ordering System CWE-89 6.3 Medium 2026-03-22
CVE-2026-4532 code-projects Simple Food Ordering System Database Backup food.sql file access — Simple Food Ordering System CWE-552 5.3 Medium 2026-03-22
CVE-2026-4319 code-projects Simple Food Order System add-item.php sql injection — Simple Food Order System CWE-89 7.3 High 2026-03-17
CVE-2026-3763 code-projects Simple Flight Ticket Booking System showhistory.php cross site scripting — Simple Flight Ticket Booking System CWE-79 4.3 Medium 2026-03-08
CVE-2026-3745 code-projects Student Web Portal profile.php sql injection — Student Web Portal CWE-89 6.3 Medium 2026-03-08
CVE-2026-3744 code-projects Student Web Portal signup.php valreg_passwdation sql injection — Student Web Portal CWE-89 7.3 High 2026-03-08
CVE-2026-3736 code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection — Simple Flight Ticket Booking System CWE-89 7.3 High 2026-03-08
CVE-2026-3735 code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection — Simple Flight Ticket Booking System CWE-89 7.3 High 2026-03-08
CVE-2026-3723 code-projects Simple Flight Ticket Booking System Admindelete.php sql injection — Simple Flight Ticket Booking System CWE-89 7.3 High 2026-03-08
CVE-2026-3711 code-projects Simple Flight Ticket Booking System Adminupdate.php sql injection — Simple Flight Ticket Booking System CWE-89 4.7 Medium 2026-03-08
CVE-2026-3710 code-projects Simple Flight Ticket Booking System Adminadd.php sql injection — Simple Flight Ticket Booking System CWE-89 4.7 Medium 2026-03-08
CVE-2026-3709 code-projects Simple Flight Ticket Booking System register.php sql injection — Simple Flight Ticket Booking System CWE-89 7.3 High 2026-03-08
CVE-2026-3708 code-projects Simple Flight Ticket Booking System login.php sql injection — Simple Flight Ticket Booking System CWE-89 7.3 High 2026-03-08
CVE-2026-3705 code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection — Simple Flight Ticket Booking System CWE-89 7.3 High 2026-03-08
CVE-2026-2912 code-projects Online Reviewer System studentresult-view.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-22
CVE-2026-2706 code-projects Patient Record Management System fecalysis_not.php sql injection — Patient Record Management System CWE-89 6.3 Medium 2026-02-19
CVE-2026-2224 code-projects Online Reviewer System btn_functions.php cross site scripting — Online Reviewer System CWE-79 3.5 Low 2026-02-09
CVE-2026-2223 code-projects Online Reviewer System index.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-09
CVE-2026-2222 code-projects Online Reviewer System btn_functions.php cross site scripting — Online Reviewer System CWE-79 2.4 Low 2026-02-09
CVE-2026-2221 code-projects Online Reviewer System Login index.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-09
CVE-2026-2220 code-projects Online Reviewer System btn_functions.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-09
CVE-2026-2214 code-projects for Plugin AdminAddAlbum.php cross site scripting — for Plugin CWE-79 2.4 Low 2026-02-09
CVE-2026-2213 code-projects Online Music Site AdminAddAlbum.php unrestricted upload — Online Music Site CWE-434 4.7 Medium 2026-02-09
CVE-2026-2212 code-projects Online Music Site AdminEditCategory.php sql injection — Online Music Site CWE-89 7.3 High 2026-02-09
CVE-2026-2211 code-projects Online Music Site AdminDeleteCategory.php sql injection — Online Music Site CWE-89 7.3 High 2026-02-09
CVE-2026-2199 code-projects Online Reviewer System user-delete.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-09
CVE-2026-2198 code-projects Online Reviewer System loaddata.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-09
CVE-2026-2197 code-projects Online Reviewer System exam-delete.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-09
CVE-2026-2196 code-projects Online Reviewer System exam-update.php sql injection — Online Reviewer System CWE-89 7.3 High 2026-02-09

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.