Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2025-0175 code-projects Online Shop view.php cross site scripting — Online Shop CWE-79 3.5 Low 2025-01-03
CVE-2025-0174 code-projects Point of Sales and Inventory Management System Parameter search_result2.php sql injection — Point of Sales and Inventory Management System CWE-89 6.3 Medium 2025-01-03
CVE-2025-0172 code-projects Chat System deleteroom.php sql injection — Chat System CWE-89 6.3 Medium 2025-01-02
CVE-2025-0171 code-projects Chat System deleteuser.php sql injection — Chat System CWE-89 6.3 Medium 2025-01-02
CVE-2024-13093 code-projects Job Recruitment Seeker Profile _call_main_search_ajax.php sql injection — Job Recruitment CWE-89 6.3 Medium 2025-01-02
CVE-2024-13092 code-projects Job Recruitment Job Post search_ajax.php sql injection — Job Recruitment CWE-89 6.3 Medium 2025-01-02
CVE-2025-0168 code-projects Job Recruitment _feedback_system.php sql injection — Job Recruitment CWE-89 6.3 Medium 2025-01-01
CVE-2024-13039 code-projects Simple Chat System add_user.php sql injection — Simple Chat System CWE-89 6.3 Medium 2024-12-30
CVE-2024-13036 code-projects Chat System update_room.php sql injection — Chat System CWE-89 6.3 Medium 2024-12-30
CVE-2024-13035 code-projects Chat System update_user.php sql injection — Chat System CWE-89 6.3 Medium 2024-12-30
CVE-2024-13034 code-projects Chat System update_user.php cross site scripting — Chat System CWE-79 3.5 Low 2024-12-30
CVE-2024-13033 code-projects Chat System chatroom.php cross site scripting — Chat System CWE-79 3.5 Low 2024-12-30
CVE-2024-13020 code-projects Chat System chatroom.php sql injection — Chat System CWE-89 6.3 Medium 2024-12-29
CVE-2024-13019 code-projects Chat System Chat Room Page update_room.php cross site scripting — Chat System CWE-79 3.5 Low 2024-12-29
CVE-2024-13012 code-projects Hostel Management System registration.php cross site scripting — Hostel Management System CWE-79 3.5 Low 2024-12-29
CVE-2024-13008 code-projects Responsive Hotel Site newsletter.php sql injection — Responsive Hotel Site CWE-89 6.3 Medium 2024-12-29
CVE-2024-12998 code-projects Online Car Rental System GET Parameter index.php cross site scripting — Online Car Rental System CWE-79 4.3 Medium 2024-12-28
CVE-2024-12983 code-projects Hospital Management System Edit Doctor Details Page manage-doctors.php cross site scripting — Hospital Management System CWE-79 2.4 Low 2024-12-27
CVE-2024-12980 code-projects Job Recruitment _all_edits.php fln_update cross site scripting — Job Recruitment CWE-79 4.3 Medium 2024-12-27
CVE-2024-12979 code-projects Job Recruitment _all_edits.php cn_update cross site scripting — Job Recruitment CWE-79 4.3 Medium 2024-12-27
CVE-2024-12978 code-projects Job Recruitment _all_edits.php add_req sql injection — Job Recruitment CWE-89 7.3 High 2024-12-27
CVE-2024-12969 code-projects Hospital Management System Login index.php sql injection — Hospital Management System CWE-89 7.3 High 2024-12-26
CVE-2024-12968 code-projects Job Recruitment _all_edits.php edit_jobpost sql injection — Job Recruitment CWE-89 7.3 High 2024-12-26
CVE-2024-12967 code-projects Job Recruitment _all_edits.php fln_update sql injection — Job Recruitment CWE-89 7.3 High 2024-12-26
CVE-2024-12966 code-projects Job Recruitment _all_edits.php cn_update sql injection — Job Recruitment CWE-89 7.3 High 2024-12-26
CVE-2024-12963 code-projects Job Recruitment _all_edits.php add_xp sql injection — Job Recruitment CWE-89 7.3 High 2024-12-26
CVE-2024-12962 code-projects Job Recruitment _all_edits.php sql injection — Job Recruitment CWE-89 7.3 High 2024-12-26
CVE-2024-12950 code-projects/projectworlds Travel Management System subcat.php sql injection — Travel Management System CWE-89 6.3 Medium 2024-12-26
CVE-2024-12949 code-projects Travel Management System package.php sql injection — Travel Management System CWE-89 6.3 Medium 2024-12-26
CVE-2024-12948 code-projects Travel Management System detail.php sql injection — Travel Management System CWE-89 6.3 Medium 2024-12-26

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.