Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2025-6837 code-projects Library System profile.php unrestricted upload — Library System CWE-434 6.3 Medium 2025-06-29
CVE-2025-6836 code-projects Library System profile.php sql injection — Library System CWE-89 7.3 High 2025-06-29
CVE-2025-6835 code-projects Library System student-issue-book.php sql injection — Library System CWE-89 7.3 High 2025-06-29
CVE-2025-6834 code-projects Inventory Management System editPayment.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6828 code-projects Inventory Management System orders.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6827 code-projects Inventory Management System editOrder.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6826 code-projects Payroll Management System ajax.php sql injection — Payroll Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6823 code-projects Inventory Management System editProduct.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6822 code-projects Inventory Management System removeProduct.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6821 code-projects Inventory Management System createOrder.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6820 code-projects Inventory Management System createProduct.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6819 code-projects Inventory Management System removeBrand.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-28
CVE-2025-6778 code-projects Food Distributor Site save_settings.php cross site scripting — Food Distributor Site CWE-79 2.4 Low 2025-06-27
CVE-2025-6777 code-projects Food Distributor Site process_login.php sql injection — Food Distributor Site CWE-89 7.3 High 2025-06-27
CVE-2025-6668 code-projects Inventory Management System fetchSelectedBrand.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-25
CVE-2025-6667 code-projects Car Rental System add_cars.php unrestricted upload — Car Rental System CWE-434 6.3 Medium 2025-06-25
CVE-2025-6665 code-projects Inventory Management System editBrand.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-25
CVE-2025-6612 code-projects Inventory Management System removeCategories.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-25
CVE-2025-6611 code-projects Inventory Management System createBrand.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-25
CVE-2025-6579 code-projects Car Rental System message_admin.php sql injection — Car Rental System CWE-89 7.3 High 2025-06-24
CVE-2025-6578 code-projects Simple Online Hotel Reservation System delete_account.php sql injection — Simple Online Hotel Reservation System CWE-89 7.3 High 2025-06-24
CVE-2025-6569 code-projects School Fees Payment System student.php cross site scripting — School Fees Payment System CWE-79 4.3 Medium 2025-06-24
CVE-2025-6503 code-projects Inventory Management System fetchSelectedCategories.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-23
CVE-2025-6502 code-projects Inventory Management System changePassword.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-23
CVE-2025-6501 code-projects Inventory Management System createCategories.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-23
CVE-2025-6500 code-projects Inventory Management System editCategories.php sql injection — Inventory Management System CWE-89 7.3 High 2025-06-23
CVE-2025-6484 code-projects Online Shopping Store action.php sql injection — Online Shopping Store CWE-89 4.7 Medium 2025-06-22
CVE-2025-6483 code-projects Simple Pizza Ordering System edituser.php sql injection — Simple Pizza Ordering System CWE-89 7.3 High 2025-06-22
CVE-2025-6482 code-projects Simple Pizza Ordering System edituser-exec.php sql injection — Simple Pizza Ordering System CWE-89 7.3 High 2025-06-22
CVE-2025-6481 code-projects Simple Pizza Ordering System update.php sql injection — Simple Pizza Ordering System CWE-89 7.3 High 2025-06-22

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.