Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2025-12302 code-projects Simple Food Ordering System editproduct.php cross site scripting — Simple Food Ordering System CWE-79 4.3 Medium 2025-10-27
CVE-2025-12301 code-projects Simple Food Ordering System editproduct.php unrestricted upload — Simple Food Ordering System CWE-434 7.3 High 2025-10-27
CVE-2025-12300 code-projects Simple Food Ordering System addcategory.php cross site scripting — Simple Food Ordering System CWE-79 4.3 Medium 2025-10-27
CVE-2025-12299 code-projects Simple Food Ordering System addproduct.php cross site scripting — Simple Food Ordering System CWE-79 4.3 Medium 2025-10-27
CVE-2025-12298 code-projects Simple Food Ordering System editcategory.php cross site scripting — Simple Food Ordering System CWE-79 4.3 Medium 2025-10-27
CVE-2025-12283 code-projects Client Details System authorization — Client Details System CWE-639 4.3 Medium 2025-10-27
CVE-2025-12282 code-projects Client Details System manage-users.php cross site scripting — Client Details System CWE-79 2.4 Low 2025-10-27
CVE-2025-12281 code-projects Client Details System clientview.php cross site scripting — Client Details System CWE-79 2.4 Low 2025-10-27
CVE-2025-12280 code-projects Client Details System update-clients.php cross site scripting — Client Details System CWE-79 2.4 Low 2025-10-27
CVE-2025-12279 code-projects Client Details System welcome.php cross site scripting — Client Details System CWE-79 2.4 Low 2025-10-27
CVE-2025-12263 code-projects Online Event Judging System edit_judge.php sql injection — Online Event Judging System CWE-89 6.3 Medium 2025-10-27
CVE-2025-12262 code-projects Online Event Judging System edit_criteria.php sql injection — Online Event Judging System CWE-89 6.3 Medium 2025-10-27
CVE-2025-12256 code-projects Online Event Judging System edit_contestant.php sql injection — Online Event Judging System CWE-89 6.3 Medium 2025-10-27
CVE-2025-12255 code-projects Online Event Judging System add_contestant.php sql injection — Online Event Judging System CWE-89 6.3 Medium 2025-10-27
CVE-2025-12254 code-projects Online Event Judging System add_judge.php sql injection — Online Event Judging System CWE-89 6.3 Medium 2025-10-27
CVE-2025-12252 code-projects Online Event Judging System action.php sql injection — Online Event Judging System CWE-89 6.3 Medium 2025-10-27
CVE-2025-12244 code-projects Simple E-Banking System register.php cross site scripting — Simple E-Banking System CWE-79 4.3 Medium 2025-10-27
CVE-2025-12243 code-projects Client Details System GET Parameter welcome.php sql injection — Client Details System CWE-89 6.3 Medium 2025-10-27
CVE-2025-12238 code-projects Automated Voting System user.php sql injection — Automated Voting System CWE-89 6.3 Medium 2025-10-27
CVE-2025-11668 code-projects Automated Voting System update_user.php sql injection — Automated Voting System CWE-89 4.7 Medium 2025-10-13
CVE-2025-11667 code-projects Automated Voting System add_candidate_modal.php. sql injection — Automated Voting System CWE-89 6.3 Medium 2025-10-13
CVE-2025-11613 code-projects Simple Food Ordering System addcategory.php sql injection — Simple Food Ordering System CWE-89 6.3 Medium 2025-10-11
CVE-2025-11612 code-projects Simple Food Ordering System addproduct.php sql injection — Simple Food Ordering System CWE-89 6.3 Medium 2025-10-11
CVE-2025-11609 code-projects Hospital Management System express-session hard-coded key — Hospital Management System CWE-321 3.7 Low 2025-10-11
CVE-2025-11608 code-projects E-Banking System POST Parameter register.php sql injection — E-Banking System CWE-89 7.3 High 2025-10-11
CVE-2025-11605 code-projects Client Details System update-profile.php sql injection — Client Details System CWE-89 6.3 Medium 2025-10-11
CVE-2025-11603 code-projects Simple Food Ordering System editproduct.php sql injection — Simple Food Ordering System CWE-89 6.3 Medium 2025-10-11
CVE-2025-11600 code-projects Simple Food Ordering System editcategory.php sql injection — Simple Food Ordering System CWE-89 6.3 Medium 2025-10-11
CVE-2025-11597 code-projects E-Commerce Website product_add_qty.php sql injection — E-Commerce Website CWE-89 6.3 Medium 2025-10-11
CVE-2025-11596 code-projects E-Commerce Website delete_order_details.php sql injection — E-Commerce Website CWE-89 7.3 High 2025-10-11

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.