Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2025-14939 code-projects Online Appointment Booking System deletemanager.php sql injection — Online Appointment Booking System CWE-89 4.7 Medium 2025-12-19
CVE-2025-14834 code-projects Simple Stock System checkuser.php sql injection — Simple Stock System CWE-89 6.3 Medium 2025-12-17
CVE-2025-14833 code-projects Online Appointment Booking System deletemanagerclinic.php sql injection — Online Appointment Booking System CWE-89 7.3 High 2025-12-17
CVE-2025-14663 code-projects Student File Management System update_student.php cross site scripting — Student File Management System CWE-79 2.4 Low 2025-12-14
CVE-2025-14662 code-projects Student File Management System Update User update_user.php cross site scripting — Student File Management System CWE-79 2.4 Low 2025-12-14
CVE-2025-14647 code-projects Computer Book Store admin_delete.php sql injection — Computer Book Store CWE-89 7.3 High 2025-12-14
CVE-2025-14646 code-projects Student File Management System delete_student.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-14
CVE-2025-14645 code-projects Student File Management System delete_user.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-14
CVE-2025-14643 code-projects Simple Attendance Record System check.php sql injection — Simple Attendance Record System CWE-89 7.3 High 2025-12-14
CVE-2025-14642 code-projects Computer Laboratory System technical_staff_pic.php unrestricted upload — Computer Laboratory System CWE-434 4.7 Medium 2025-12-14
CVE-2025-14641 code-projects Computer Laboratory System admin_pic.php unrestricted upload — Computer Laboratory System CWE-434 4.7 Medium 2025-12-14
CVE-2025-14640 code-projects Student File Management System save_student.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-14
CVE-2025-14623 code-projects Student File Management System update_student.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-13
CVE-2025-14622 code-projects Student File Management System save_user.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-13
CVE-2025-14621 code-projects Student File Management System update_user.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-13
CVE-2025-14620 code-projects Student File Management System login_query.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-13
CVE-2025-14619 code-projects Student File Management System login_query.php sql injection — Student File Management System CWE-89 7.3 High 2025-12-13
CVE-2025-14590 code-projects Prison Management System search1.php sql injection — Prison Management System CWE-89 7.3 High 2025-12-13
CVE-2025-14589 code-projects Prison Management System search.php sql injection — Prison Management System CWE-89 6.3 Medium 2025-12-13
CVE-2025-14537 code-projects Class and Exam Timetable Management preview7.php sql injection — Class and Exam Timetable Management CWE-89 7.3 High 2025-12-11
CVE-2025-14536 code-projects Class and Exam Timetable Management Login index.php sql injection — Class and Exam Timetable Management CWE-89 7.3 High 2025-12-11
CVE-2025-14531 code-projects Rental Management System Log Transaction.java crlf injection — Rental Management System CWE-93 4.3 Medium 2025-12-11
CVE-2025-14285 code-projects Employee Profile Management System edit_personnel.php sql injection — Employee Profile Management System CWE-89 7.3 High 2025-12-09
CVE-2025-14251 code-projects Online Ordering System Admin Login admin sql injection — Online Ordering System CWE-89 7.3 High 2025-12-08
CVE-2025-14250 code-projects Online Ordering System user_contact.php sql injection — Online Ordering System CWE-89 7.3 High 2025-12-08
CVE-2025-14249 code-projects Online Ordering System user_school.php sql injection — Online Ordering System CWE-89 7.3 High 2025-12-08
CVE-2025-14248 code-projects Simple Shopping Cart adminlogin.php sql injection — Simple Shopping Cart CWE-89 7.3 High 2025-12-08
CVE-2025-14247 code-projects Simple Shopping Cart additems.php sql injection — Simple Shopping Cart CWE-89 6.3 Medium 2025-12-08
CVE-2025-14246 code-projects Simple Shopping Cart settings.php sql injection — Simple Shopping Cart CWE-89 6.3 Medium 2025-12-08
CVE-2025-14230 code-projects Daily Time Recording System add_payroll.php sql injection — Daily Time Recording System CWE-89 6.3 Medium 2025-12-08

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.