Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-7115 code-projects Employee Management System delete.php sql injection — Employee Management System CWE-89 6.3 Medium 2026-04-27
CVE-2026-7114 code-projects Employee Management System edit.php sql injection — Employee Management System CWE-89 6.3 Medium 2026-04-27
CVE-2026-7110 code-projects Invoice System in Laravel item cross site scripting — Invoice System in Laravel CWE-79 3.5 Low 2026-04-27
CVE-2026-7109 code-projects Invoice System in Laravel API Endpoint item improper authorization — Invoice System in Laravel CWE-285 5.3 Medium 2026-04-27
CVE-2026-7108 code-projects Invoice System in Laravel cross-site request forgery — Invoice System in Laravel CWE-352 4.3 Medium 2026-04-27
CVE-2026-7107 code-projects Invoice System in Laravel company unrestricted upload — Invoice System in Laravel CWE-434 6.3 Medium 2026-04-27
CVE-2026-7103 code-projects Chat System MD5 Hash update_user.php weak hash — Chat System CWE-328 3.7 Low 2026-04-27
CVE-2026-7095 code-projects Employee Management System edit.php cross site scripting — Employee Management System CWE-79 4.3 Medium 2026-04-27
CVE-2026-7093 code-projects Invoice System in Laravel Invoice Endpoint invoice improper authorization — Invoice System in Laravel CWE-285 6.3 Medium 2026-04-27
CVE-2026-7092 code-projects Invoice System in Laravel Profile profile improper authorization — Invoice System in Laravel CWE-285 6.3 Medium 2026-04-27
CVE-2026-7091 code-projects Invoice System in Laravel User Management user improper authorization — Invoice System in Laravel CWE-285 6.3 Medium 2026-04-27
CVE-2026-7090 code-projects Chat System send_message.php cross site scripting — Chat System CWE-79 2.4 Low 2026-04-27
CVE-2026-7089 code-projects Home Service System Appointment Booking booking.php cross site scripting — Home Service System CWE-79 4.3 Medium 2026-04-27
CVE-2026-7070 code-projects Inventory Management System Login sql injection — Inventory Management System CWE-89 7.3 High 2026-04-27
CVE-2026-7063 code-projects Employee Management System Endpoint eprocess.php sql injection — Employee Management System CWE-89 7.3 High 2026-04-26
CVE-2026-6202 code-projects Easy Blog Site post.php sql injection — Easy Blog Site CWE-89 6.3 Medium 2026-04-13
CVE-2026-6184 code-projects Simple Content Management System welcome.php cross site scripting — Simple Content Management System CWE-79 2.4 Low 2026-04-13
CVE-2026-6183 code-projects Simple Content Management System index.php sql injection — Simple Content Management System CWE-89 7.3 High 2026-04-13
CVE-2026-6182 code-projects Simple Content Management System login.php sql injection — Simple Content Management System CWE-89 7.3 High 2026-04-13
CVE-2026-6167 code-projects Faculty Management System subject-print.php sql injection — Faculty Management System CWE-89 7.3 High 2026-04-13
CVE-2026-6166 code-projects Vehicle Showroom Management System UpdateVehicleFunction.php sql injection — Vehicle Showroom Management System CWE-89 7.3 High 2026-04-13
CVE-2026-6165 code-projects Vehicle Showroom Management System Login_check.php sql injection — Vehicle Showroom Management System CWE-89 7.3 High 2026-04-13
CVE-2026-6164 code-projects Lost and Found Thing Management addcat.php sql injection — Lost and Found Thing Management CWE-89 7.3 High 2026-04-13
CVE-2026-6163 code-projects Lost and Found Thing Management catageory.php sql injection — Lost and Found Thing Management CWE-89 7.3 High 2026-04-13
CVE-2026-6161 code-projects Simple ChatBox Endpoint insert.php sql injection — Simple ChatBox CWE-89 7.3 High 2026-04-13
CVE-2026-6160 code-projects Simple ChatBox Endpoint chatbox.sql SimpleChatbox_PHP file information disclosure — Simple ChatBox CWE-538 5.3 Medium 2026-04-13
CVE-2026-6159 code-projects Simple ChatBox Endpoint insert.php cross site scripting — Simple ChatBox CWE-79 4.3 Medium 2026-04-13
CVE-2026-6153 code-projects Vehicle Showroom Management System StaffDetailsFunction.php sql injection — Vehicle Showroom Management System CWE-89 7.3 High 2026-04-13
CVE-2026-6152 code-projects Vehicle Showroom Management System StaffAddingFunction.php sql injection — Vehicle Showroom Management System CWE-89 7.3 High 2026-04-13
CVE-2026-6151 code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection — Vehicle Showroom Management System CWE-89 7.3 High 2026-04-13

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.