Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-0607 code-projects Online Music Site AdminViewSongs.php sql injection — Online Music Site CWE-89 7.3 High 2026-01-05
CVE-2026-0606 code-projects Online Music Site Albums.php sql injection — Online Music Site CWE-89 7.3 High 2026-01-05
CVE-2026-0605 code-projects Online Music Site login.php sql injection — Online Music Site CWE-89 7.3 High 2026-01-05
CVE-2026-0592 code-projects Online Product Reservation System User Registration register_code.php sql injection — Online Product Reservation System CWE-89 7.3 High 2026-01-05
CVE-2026-0591 code-projects Online Product Reservation System Cart Update update.php sql injection — Online Product Reservation System CWE-89 6.3 Medium 2026-01-05
CVE-2026-0590 code-projects Online Product Reservation System POST Parameter delete.php sql injection — Online Product Reservation System CWE-89 6.3 Medium 2026-01-05
CVE-2026-0589 code-projects Online Product Reservation System Administration Backend improper authentication — Online Product Reservation System CWE-287 7.3 High 2026-01-05
CVE-2026-0586 code-projects Online Product Reservation System prod.php cross site scripting — Online Product Reservation System CWE-79 4.3 Medium 2026-01-05
CVE-2026-0585 code-projects Online Product Reservation System GET Parameter order_view.php sql injection — Online Product Reservation System CWE-89 7.3 High 2026-01-05
CVE-2026-0584 code-projects Online Product Reservation System left_cart.php sql injection — Online Product Reservation System CWE-89 6.3 Medium 2026-01-05
CVE-2026-0583 code-projects Online Product Reservation System User Login login.php sql injection — Online Product Reservation System CWE-89 7.3 High 2026-01-05
CVE-2026-0579 code-projects Online Product Reservation System POST Parameter edit.php sql injection — Online Product Reservation System CWE-89 7.3 High 2026-01-04
CVE-2026-0578 code-projects Online Product Reservation System delete.php sql injection — Online Product Reservation System CWE-89 7.3 High 2026-01-04
CVE-2026-0577 code-projects Online Product Reservation System prod.php unrestricted upload — Online Product Reservation System CWE-434 6.3 Medium 2026-01-04
CVE-2026-0576 code-projects Online Product Reservation System Parameter prod.php sql injection — Online Product Reservation System CWE-89 7.3 High 2026-01-04
CVE-2026-0575 code-projects Online Product Reservation System Administrator Login adminlogin.php sql injection — Online Product Reservation System CWE-89 7.3 High 2026-01-04
CVE-2026-0570 code-projects Online Music Site Feedback.php sql injection — Online Music Site CWE-89 7.3 High 2026-01-02
CVE-2026-0569 code-projects Online Music Site AlbumByCategory.php sql injection — Online Music Site CWE-89 7.3 High 2026-01-02
CVE-2026-0568 code-projects Online Music Site ViewSongs.php sql injection — Online Music Site CWE-89 7.3 High 2026-01-02
CVE-2026-0567 code-projects Content Management System pages.php sql injection — Content Management System CWE-89 7.3 High 2026-01-02
CVE-2026-0566 code-projects Content Management System edit_posts.php unrestricted upload — Content Management System CWE-434 4.7 Medium 2026-01-02
CVE-2026-0565 code-projects Content Management System delete.php sql injection — Content Management System CWE-89 7.3 High 2026-01-02
CVE-2026-0546 code-projects Content Management System search.php sql injection — Content Management System CWE-89 7.3 High 2026-01-02
CVE-2025-15410 code-projects Online Guitar Store login.php sql injection — Online Guitar Store CWE-89 7.3 High 2026-01-01
CVE-2025-15409 code-projects Online Guitar Store Delete_product.php sql injection — Online Guitar Store CWE-89 7.3 High 2026-01-01
CVE-2025-15408 code-projects Online Guitar Store Create_product.php sql injection — Online Guitar Store CWE-89 7.3 High 2026-01-01
CVE-2025-15407 code-projects Online Guitar Store Create_category.php sql injection — Online Guitar Store CWE-89 7.3 High 2026-01-01
CVE-2025-15243 code-projects Simple Stock System login.php sql injection — Simple Stock System CWE-89 7.3 High 2025-12-30
CVE-2025-15213 code-projects Student File Management System File Download download.php improper authorization — Student File Management System CWE-285 4.3 Medium 2025-12-30
CVE-2025-15212 code-projects Refugee Food Management System regfood.php sql injection — Refugee Food Management System CWE-89 6.3 Medium 2025-12-30

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.