Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection — Doctor Appointment System CWE-89 7.3 High 2026-09-04
CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection — Doctor Appointment System CWE-89 7.3 High 2026-09-04
CVE-2026-85399 code-projects Hospital Information System PrespController.php getSinglePresp sql injection — Hospital Information System CWE-89 7.3 High 2026-09-04
CVE-2026-85398 code-projects Hospital Information System viewReq.php viewReq sql injection — Hospital Information System CWE-89 7.3 High 2026-09-04
CVE-2026-85397 code-projects Hospital Information System addReq.php findBySearch sql injection — Hospital Information System CWE-89 7.3 High 2026-09-04
CVE-2026-85225 code-projects Doctor Appointment System patient_login.php sql injection — Doctor Appointment System CWE-89 7.3 High 2026-09-03
CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection — Online Shopping System CWE-89 7.3 High 2026-08-31
CVE-2026-82700 code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scripting — Online Shopping System CWE-79 4.3 Medium 2026-08-31
CVE-2026-82625 code-projects Simple Inventory System User Registration register.php cross site scripting — Simple Inventory System CWE-79 4.3 Medium 2026-08-31
CVE-2026-82624 code-projects Simple Inventory System Database Backup File inventorymanagement.sql information disclosure — Simple Inventory System CWE-200 5.3 Medium 2026-08-31
CVE-2026-82622 code-projects Employee Leave Managing System Employee Profile Update editaction.php cross site scripting — Employee Leave Managing System CWE-79 3.5 Low 2026-08-31
CVE-2026-79845 code-projects Simple Inventory System edit.php sql injection — Simple Inventory System CWE-89 7.3 High 2026-08-25
CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting — Online Shopping System CWE-79 4.3 Medium 2026-08-25
CVE-2026-78144 code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization — Barangay Resident Profiling Management System CWE-639 6.3 Medium 2026-08-23
CVE-2026-78143 code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection — Barangay Resident Profiling Management System CWE-89 7.3 High 2026-08-23
CVE-2026-78142 code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization — Barangay Resident Profiling Management System CWE-639 6.3 Medium 2026-08-23
CVE-2026-76990 code-projects Simple Inventory System delete.php sql injection — Simple Inventory System CWE-89 7.3 High 2026-08-20
CVE-2026-76799 code-projects Login Registration System SQL Database Backup login_registration_system.sql file access — Login Registration System CWE-552 5.3 Medium 2026-08-20
CVE-2026-76764 code-projects Employee Management System Admin Login Endpoint aprocess.php sql injection — Employee Management System CWE-89 7.3 High 2026-08-20
CVE-2026-76762 code-projects Assessment Management welcome.php sql injection — Assessment Management CWE-89 7.3 High 2026-08-19
CVE-2026-76574 code-projects Hospital Information System User Login UsersController.php login sql injection — Hospital Information System CWE-89 7.3 High 2026-08-19
CVE-2026-75986 code-projects Online Job Portal System Password Recovery ForPass.php sql injection — Online Job Portal System CWE-89 7.3 High 2026-08-19
CVE-2026-75778 code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection — Task Management System CWE-89 7.3 High 2026-08-18
CVE-2026-19998 code-projects Online Shopping System offersmail.php cross site scripting — Online Shopping System CWE-79 4.3 Medium 2026-08-17
CVE-2026-19923 code-projects Online Shopping System checkout_process.php sql injection — Online Shopping System CWE-89 6.3 Medium 2026-08-16
CVE-2026-19922 code-projects Online Shopping System checkout.php cross site scripting — Online Shopping System CWE-79 3.5 Low 2026-08-16
CVE-2026-19921 code-projects Online Shopping System homeaction.php sql injection — Online Shopping System CWE-89 6.3 Medium 2026-08-16
CVE-2026-19920 code-projects Online Shopping System action.php sql injection — Online Shopping System CWE-89 6.3 Medium 2026-08-15
CVE-2026-19919 code-projects Online Shopping System Login login.php sql injection — Online Shopping System CWE-89 7.3 High 2026-08-15
CVE-2026-19917 code-projects Online Food Order System delete_food_items1.php sql injection — Online Food Order System CWE-89 6.3 Medium 2026-08-15

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.