Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

code-projects — Vulnerabilities & Security Advisories 1371

Browse all 1371 CVE security advisories affecting code-projects. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Code-projects is a software development platform primarily serving as a repository for user-generated code snippets, tutorials, and project files. Historically, the platform has been associated with a significant volume of security vulnerabilities, currently totaling 1238 CVEs. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from insecure handling of uploaded files or inadequate input validation within user-submitted scripts. The high number of recorded vulnerabilities suggests systemic weaknesses in the platform’s code review and deployment processes, allowing malicious actors to exploit exposed endpoints. While specific major incidents are rarely publicized as widespread breaches, the sheer quantity of CVEs indicates a persistent risk for users downloading and executing unverified code from the site. This environment necessitates rigorous sandboxing and verification practices for any developer interacting with the platform’s resources.

CVE ID Title CVSS Severity Published
CVE-2026-5705 code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting — Online Hotel Booking CWE-79 4.3 Medium 2026-04-06
CVE-2026-5672 code-projects Simple IT Discussion Forum Parameter edit-category.php sql injection — Simple IT Discussion Forum CWE-89 7.3 High 2026-04-06
CVE-2026-5666 code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information — Online FIR System CWE-922 5.3 Medium 2026-04-06
CVE-2026-5665 code-projects Online FIR System Login checklogin.php sql injection — Online FIR System CWE-89 7.3 High 2026-04-06
CVE-2026-5650 code-projects Online Application System for Admission oas.sql sensitive information — Online Application System for Admission CWE-922 5.3 Medium 2026-04-06
CVE-2026-5649 code-projects Online Application System for Admission Endpoint admsnform.php sql injection — Online Application System for Admission CWE-89 6.3 Medium 2026-04-06
CVE-2026-5648 code-projects Simple Laundry System Parameter userfinishregister.php sql injection — Simple Laundry System CWE-89 7.3 High 2026-04-06
CVE-2026-5647 code-projects Online Shoe Store Add Product admin_feature.php cross site scripting — Online Shoe Store CWE-79 2.4 Low 2026-04-06
CVE-2026-5646 code-projects Easy Blog Site login.php sql injection — Easy Blog Site CWE-89 7.3 High 2026-04-06
CVE-2026-5565 code-projects Simple Laundry System Parameter delmemberinfo.php sql injection — Simple Laundry System CWE-89 7.3 High 2026-04-05
CVE-2026-5564 code-projects Simple Laundry System Parameter searchguest.php sql injection — Simple Laundry System CWE-89 7.3 High 2026-04-05
CVE-2026-5555 code-projects Concert Ticket Reservation System Parameter login.php sql injection — Concert Ticket Reservation System CWE-89 7.3 High 2026-04-05
CVE-2026-5554 code-projects Concert Ticket Reservation System Parameter process_search.php sql injection — Concert Ticket Reservation System CWE-89 7.3 High 2026-04-05
CVE-2026-5542 code-projects Simple Laundry System Parameter modstaffinfo.php cross site scripting — Simple Laundry System CWE-79 4.3 Medium 2026-04-05
CVE-2026-5541 code-projects Simple Laundry System Parameter modmemberinfo.php cross site scripting — Simple Laundry System CWE-79 4.3 Medium 2026-04-05
CVE-2026-5540 code-projects Simple Laundry System Parameter modifymember.php sql injection — Simple Laundry System CWE-89 7.3 High 2026-04-05
CVE-2026-5539 code-projects Simple Laundry System Parameter modifymember.php cross site scripting — Simple Laundry System CWE-79 4.3 Medium 2026-04-05
CVE-2026-5257 code-projects Simple Laundry System Parameter delstaffinfo.php sql injection — Simple Laundry System CWE-89 7.3 High 2026-04-01
CVE-2026-5256 code-projects Simple Laundry System Parameter modify.php sql injection — Simple Laundry System CWE-89 7.3 High 2026-04-01
CVE-2026-5255 code-projects Simple Laundry System Parameter delstaffinfo.php cross site scripting — Simple Laundry System CWE-79 4.3 Medium 2026-04-01
CVE-2026-5240 code-projects BloodBank Managing System admin_state.php cross site scripting — BloodBank Managing System CWE-79 4.3 Medium 2026-03-31
CVE-2026-5206 code-projects Simple Gym Management System Payment sql injection — Simple Gym Management System CWE-89 6.3 Medium 2026-03-31
CVE-2026-5198 code-projects Student Membership System Admin Login index.php sql injection — Student Membership System CWE-89 7.3 High 2026-03-31
CVE-2026-5197 code-projects Student Membership System delete_user.php sql injection — Student Membership System CWE-89 6.3 Medium 2026-03-31
CVE-2026-5196 code-projects Student Membership System delete_member.php sql injection — Student Membership System CWE-89 6.3 Medium 2026-03-31
CVE-2026-5195 code-projects Student Membership System User Registration sql injection — Student Membership System CWE-89 7.3 High 2026-03-31
CVE-2026-5157 code-projects Online Food Ordering System Order order.php cross site scripting — Online Food Ordering System CWE-79 4.3 Medium 2026-03-30
CVE-2026-5150 code-projects Accounting System Parameter viewin_costumer.php sql injection — Accounting System CWE-89 7.3 High 2026-03-30
CVE-2026-5106 code-projects Exam Form Submission update_fst.php cross site scripting — Exam Form Submission CWE-79 2.4 Low 2026-03-30
CVE-2026-5041 code-projects Chamber of Commerce Membership Management System pageMail.php fwrite command injection — Chamber of Commerce Membership Management System CWE-77 4.7 Medium 2026-03-29

This page lists every published CVE security advisory associated with code-projects. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.