CVE-2026-85517

A sensitive information disclosure vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the file /vehicle_management.sql handled by the SQL Database Backup File Handler . An unknown function in this component allows an unauthenticated remote attacker to disclose s...

CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85516

A SQL injection vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the busid parameter of the file /busprofile.php. The vulnerability can be exploited remotely without authentication via manipulation of that argument. CVSS 3.1 rates it 7.3 (HIGH) with low impact...

CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85399

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85402

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85399 code-projects Hospital Information System PrespController.php getSinglePresp sql injection

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85399 code-projects Hospital Information System PrespController.php getSinglePresp sql injection

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85398

code-projects Hospital Information System 1.0 contains a SQL injection vulnerability in the viewReq function of the file viewReq.php , triggered by manipulating the ID argument. The attack can be launched remotely without authentication. The CVSS 3.1 base score is 7.3 (HIGH) with low impacts on c...

CVE-2026-85399: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85516: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85397: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Hospital Information System 1.0. This impacts the function findBySearch of the file addReq.php. This manipulation of the argument Search causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed an...

PT-2026-85391

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

PT-2026-85528

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85643: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Online Shopping System 1.0. Impacted is the function mysqliquery of the file admin/adduser.php. Executing a manipulation of the argument mobile can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...