Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-10110 code-projects Student Details Management System index.php sql injection — Student Details Management System CWE-89 7.3 High 2026-05-30
CVE-2026-9584 code-projects Project Management System Login chk.php sql injection — Project Management System CWE-89 7.3 High 2026-05-26
CVE-2026-9451 code-projects Employee Management System applyleaveprocess.php sql injection — Employee Management System CWE-89 6.3 Medium 2026-05-25
CVE-2026-9450 code-projects Employee Management System psubmit.php sql injection — Employee Management System CWE-89 6.3 Medium 2026-05-25
CVE-2026-9449 code-projects Employee Management System changepassemp.php sql injection — Employee Management System CWE-89 6.3 Medium 2026-05-25
CVE-2026-9448 code-projects Employee Management System applyleave.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-05-25
CVE-2026-9419 code-projects Employee Management System empproject.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-05-25
CVE-2026-9418 code-projects Employee Management System changepassemp.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-05-25
CVE-2026-9417 code-projects Employee Management System myprofileup.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-05-25
CVE-2026-9416 code-projects Employee Management System myprofile.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-05-25
CVE-2026-9415 code-projects Employee Management System eloginwel.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-05-25
CVE-2026-8125 code-projects Simple Chat System sendMessage.php sql injection — Simple Chat System CWE-89 6.3 Medium 2026-05-08
CVE-2026-8098 code-projects Feedback System checklogin.php sql injection — Feedback System CWE-89 7.3 High 2026-05-07
CVE-2026-7732 code-projects BloodBank Managing System request_blood.php unrestricted upload — BloodBank Managing System CWE-434 6.3 Medium 2026-05-04
CVE-2026-7731 code-projects BloodBank Managing System get_state.php sql injection — BloodBank Managing System CWE-89 6.3 Medium 2026-05-04
CVE-2026-7716 code-projects Gym Management System In PHP/Windows NT index.php sql injection — Gym Management System In PHP CWE-89 6.3 Medium 2026-05-04
CVE-2026-7632 code-projects Online Hospital Management System viewappointment.php sql injection — Online Hospital Management System CWE-89 7.3 High 2026-05-02
CVE-2026-7631 code-projects Online Hospital Management System Registration improper authorization — Online Hospital Management System CWE-285 5.4 Medium 2026-05-02
CVE-2026-7553 code-projects Gym Management System edit_exercises.php sql injection — Gym Management System CWE-89 4.7 Medium 2026-05-01
CVE-2026-7503 code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow — for Plugin CWE-120 8.8 High 2026-04-30
CVE-2026-7238 code-projects Online Music Site AdminUpdateAlbum.php unrestricted upload — Online Music Site CWE-434 4.7 Medium 2026-04-28
CVE-2026-7229 code-projects Coaching Management System POST reply.php sql injection — Coaching Management System CWE-89 6.3 Medium 2026-04-28
CVE-2026-7222 code-projects Coaching Management System Complaint Form complaint.php cross site scripting — Coaching Management System CWE-79 3.5 Low 2026-04-28
CVE-2026-7134 code-projects Online Lot Reservation System edithousepic.php unrestricted upload — Online Lot Reservation System CWE-434 4.7 Medium 2026-04-27
CVE-2026-7133 code-projects Online Lot Reservation System activity.php unrestricted upload — Online Lot Reservation System CWE-434 4.7 Medium 2026-04-27
CVE-2026-7132 code-projects Online Lot Reservation System download.php readfile path traversal — Online Lot Reservation System CWE-22 5.3 Medium 2026-04-27
CVE-2026-7131 code-projects Online Lot Reservation System loginuser.php sql injection — Online Lot Reservation System CWE-89 7.3 High 2026-04-27
CVE-2026-7118 code-projects Employee Management System cancel.php sql injection — Employee Management System CWE-89 6.3 Medium 2026-04-27
CVE-2026-7117 code-projects Employee Management System approve.php sql injection — Employee Management System CWE-89 6.3 Medium 2026-04-27
CVE-2026-7116 code-projects Employee Management System mark.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-04-27

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.