Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-14701 code-projects Internship Management System Password Change Endpoint change_password.php sql injection — Internship Management System CWE-89 6.3 Medium 2026-07-05
CVE-2026-14700 code-projects Internship Management System Employer Login Endpoint login.php sql injection — Internship Management System CWE-89 7.3 High 2026-07-05
CVE-2026-14660 code-projects Online Job Portal login.php sql injection — Online Job Portal CWE-89 7.3 High 2026-07-04
CVE-2026-14658 code-projects Assessment Management marking-scheme.php sql injection — Assessment Management CWE-89 6.3 Medium 2026-07-04
CVE-2026-14657 code-projects Assessment Management Database Query marking-scheme.php sql injection — Assessment Management CWE-89 6.3 Medium 2026-07-04
CVE-2026-14656 code-projects Assessment Management remove-user.php cross site scripting — Assessment Management CWE-79 4.3 Medium 2026-07-04
CVE-2026-14655 code-projects Assessment Management view-users.php cross site scripting — Assessment Management CWE-79 2.4 Low 2026-07-04
CVE-2026-14649 code-projects Online Voting System saveVote.php test_input sql injection — Online Voting System CWE-89 7.3 High 2026-07-04
CVE-2026-14648 code-projects Online Voting System Login authentication.php test_input sql injection — Online Voting System CWE-89 7.3 High 2026-07-04
CVE-2026-13567 code-projects Online Music Site POST Request Feedback.php cross site scripting — Online Music Site CWE-79 4.3 Medium 2026-06-29
CVE-2026-13559 code-projects Real State Services single-list_sale.php add sql injection — Real State Services CWE-89 7.3 High 2026-06-29
CVE-2026-13504 code-projects Project Management System Mail Compose mail.php cross site scripting — Project Management System CWE-79 3.5 Low 2026-06-28
CVE-2026-11490 code-projects Online Music Site Search.php sql injection — Online Music Site CWE-89 7.3 High 2026-06-08
CVE-2026-11489 code-projects Online Music Site AdminDeleteAlbum.php sql injection — Online Music Site CWE-89 7.3 High 2026-06-08
CVE-2026-11488 code-projects Simple Flight Ticket Booking System POST Parameter checkUser.php sql injection — Simple Flight Ticket Booking System CWE-89 7.3 High 2026-06-08
CVE-2026-11344 code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted upload — Vehicle Management System CWE-434 7.3 High 2026-06-05
CVE-2026-11342 code-projects Hotel and Tourism Reservation System details.php sql injection — Hotel and Tourism Reservation System CWE-89 7.3 High 2026-06-05
CVE-2026-10620 code-projects Student Admission System index.php sql injection — Student Admission System CWE-89 7.3 High 2026-06-02
CVE-2026-10299 code-projects Online Hospital Management System viewdoctortimings.php resource injection — Online Hospital Management System CWE-99 3.8 Low 2026-06-01
CVE-2026-10290 code-projects Hotel and Tourism Reservation System GET Parameter tour.php sql injection — Hotel and Tourism Reservation System CWE-89 7.3 High 2026-06-01
CVE-2026-10289 code-projects Hotel and Tourism Reservation System tour.php cross site scripting — Hotel and Tourism Reservation System CWE-79 4.3 Medium 2026-06-01
CVE-2026-10288 code-projects Hotel and Tourism Reservation System Admin Login login.php password_verify improper authentication — Hotel and Tourism Reservation System CWE-287 7.3 High 2026-06-01
CVE-2026-10262 code-projects Real State Services Login loginuser.php sql injection — Real State Services CWE-89 7.3 High 2026-06-01
CVE-2026-10243 code-projects Smart Parking System Admin Endpoint missing authentication — Smart Parking System CWE-306 7.3 High 2026-06-01
CVE-2026-10209 code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection — Online Hospital Management System CWE-89 6.3 Medium 2026-06-01
CVE-2026-10208 code-projects Online Hospital Management System login_1.php login_user sql injection — Online Hospital Management System CWE-89 7.3 High 2026-06-01
CVE-2026-10186 code-projects Online Hospital Management System patient.php sql injection — Online Hospital Management System CWE-89 7.3 High 2026-05-31
CVE-2026-10178 code-projects Online Music Site AdminEditAlbum.php sql injection — Online Music Site CWE-89 7.3 High 2026-05-31
CVE-2026-10171 code-projects Online Music Site AdminUpdateAlbum.php sql injection — Online Music Site CWE-89 4.7 Medium 2026-05-31
CVE-2026-10170 code-projects Visitor Management System phone_0.php sql injection — Visitor Management System CWE-89 6.3 Medium 2026-05-31

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.