Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2025-2973 code-projects College Management System student.php unrestricted upload — College Management System CWE-434 6.3 Medium 2025-03-31
CVE-2025-2854 code-projects Payroll Management System update_employee.php sql injection — Payroll Management System CWE-89 6.3 Medium 2025-03-27
CVE-2025-2673 code-projects Payroll Management System home_employee.php cross site scripting — Payroll Management System CWE-79 3.5 Low 2025-03-23
CVE-2025-2672 code-projects Payroll Management System add_deductions.php sql injection — Payroll Management System CWE-89 6.3 Medium 2025-03-23
CVE-2025-2590 code-projects Human Resource Management System recruitment.go UpdateRecruitmentById cross site scripting — Human Resource Management System CWE-79 2.4 Low 2025-03-21
CVE-2025-2589 code-projects Human Resource Management System Account.go Index improper authorization — Human Resource Management System CWE-285 5.5 Medium 2025-03-21
CVE-2025-2419 code-projects Real Estate Property Management System InsertFeedback.php sql injection — Real Estate Property Management System CWE-89 6.3 Medium 2025-03-17
CVE-2025-2393 code-projects Online Class and Exam Scheduling System salut_del.php sql injection — Online Class and Exam Scheduling System CWE-89 4.7 Medium 2025-03-17
CVE-2025-2392 code-projects Online Class and Exam Scheduling System activate.php sql injection — Online Class and Exam Scheduling System CWE-89 4.7 Medium 2025-03-17
CVE-2025-2391 code-projects Blood Bank Management System Admin Login Page admin_login.php sql injection — Blood Bank Management System CWE-89 7.3 High 2025-03-17
CVE-2025-2390 code-projects Blood Bank Management System add_donor.php sql injection — Blood Bank Management System CWE-89 6.3 Medium 2025-03-17
CVE-2025-2389 code-projects Blood Bank Management System add_city.php sql injection — Blood Bank Management System CWE-89 4.7 Medium 2025-03-17
CVE-2025-2385 code-projects Modern Bag login.php sql injection — Modern Bag CWE-89 7.3 High 2025-03-17
CVE-2025-2384 code-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection — Real Estate Property Management System CWE-89 6.3 Medium 2025-03-17
CVE-2025-2061 code-projects Online Ticket Reservation System passenger.php cross site scripting — Online Ticket Reservation System CWE-79 4.3 Medium 2025-03-07
CVE-2025-2054 code-projects Blood Bank Management System edit_state.php sql injection — Blood Bank Management System CWE-89 4.7 Medium 2025-03-07
CVE-2025-2049 code-projects Blood Bank System AB+.php cross site scripting — Blood Bank System CWE-79 3.5 Low 2025-03-06
CVE-2025-2044 code-projects Blood Bank Management System delete_bloodGroup.php sql injection — Blood Bank Management System CWE-89 4.7 Medium 2025-03-06
CVE-2025-2039 code-projects Blood Bank Management System delete_members.php sql injection — Blood Bank Management System CWE-89 4.7 Medium 2025-03-06
CVE-2025-2038 code-projects Blood Bank Management System upload exposure of information through directory listing — Blood Bank Management System CWE-548 7.3 High 2025-03-06
CVE-2025-2037 code-projects Blood Bank Management System delete_requester.php sql injection — Blood Bank Management System CWE-89 6.3 Medium 2025-03-06
CVE-2025-2033 code-projects Blood Bank Management System view_donor.php sql injection — Blood Bank Management System CWE-89 6.3 Medium 2025-03-06
CVE-2025-1967 code-projects Blood Bank Management System donor.php cross site scripting — Blood Bank Management System CWE-79 3.5 Low 2025-03-05
CVE-2025-1957 code-projects Blood Bank System o+.php cross site scripting — Blood Bank System CWE-79 3.5 Low 2025-03-04
CVE-2025-1956 code-projects Shopping Portal Login index.php sql injection — Shopping Portal CWE-89 7.3 High 2025-03-04
CVE-2025-1955 code-projects Online Class and Exam Scheduling System profile.php cross site scripting — Online Class and Exam Scheduling System CWE-79 3.5 Low 2025-03-04
CVE-2025-1904 code-projects Blood Bank System A+.php cross site scripting — Blood Bank System CWE-79 3.5 Low 2025-03-04
CVE-2025-1586 code-projects Blood Bank System A-.php cross site scripting — Blood Bank System CWE-79 3.5 Low 2025-02-23
CVE-2025-1579 code-projects Blood Bank System user.php cross site scripting — Blood Bank System CWE-79 2.4 Low 2025-02-23
CVE-2025-1577 code-projects Blood Bank System prostatus.php cross site scripting — Blood Bank System CWE-79 3.5 Low 2025-02-23

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.