CVE-2025-4037 code-projects ATM Banking moneyWithdraw logic error

A vulnerability was found in code-projects ATM Banking 1.0. It has been classified as critical. Affected is the function moneyDeposit/moneyWithdraw. The manipulation leads to business logic errors. Local access is required to approach this attack. The exploit has been disclosed to the public and...

Code-Projects Personal Diary Management System 安全漏洞

Code-Projects Personal Diary Management System is an open source personal diary management system from Code-Projects. A security vulnerability exists in Code-Projects Personal Diary Management System version 1.0, which is caused by a stack buffer overflow due to incorrect manipulation of the...

Code-Projects Patient Record Management System 安全漏洞

Code-Projects Patient Record Management System is an open source patient record management system from Code-Projects. A security vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter...

PT-2025-18097 · Unknown · Code-Projects Personal Diary Management System

Name of the Vulnerable Software and Affected Versions: code-projects Personal Diary Management System version 1.0 Description: A critical issue was found in the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to a stack-based buffer overflow...

Code-Projects Train Ticket Reservation System 安全漏洞

Code-Projects Train Ticket Reservation System is an open source train ticket reservation system from Code-Projects. A security vulnerability exists in Code-Projects Train Ticket Reservation System version 1.0, which stems from a stack buffer overflow due to an incorrect manipulation of the...

Code-Projects ATM Banking 安全漏洞

Code-Projects ATM Banking is an atm management system from Code-Projects open source. A security vulnerability exists in Code-Projects ATM Banking version 1.0, which stems from a business logic error in the moneyDeposit and moneyWithdraw functions that could lead to a local attack...

CVE-2025-4029: Stack-based Buffer Overflow

A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based buffer overflow. Local access is require...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter id/lastname in file /editrpatient.php.php. An attacker...

Code-Projects News Publishing Site Dashboard 代码问题漏洞

Code-Projects News Publishing Site Dashboard is an open source news publishing site dashboard from Code-Projects. A code issue vulnerability exists in version 1.0 of Code-Projects News Publishing Site Dashboard, which stems from a misbehavior of the parameter categoryimage in the file...

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...

Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management for projects, whose namespace defaults to being the project name, regardless of cluster. A user with permission to create a project can escalate privileges to those of a user who owns a project by the same...

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

CVE-2025-44134

The Code-Projects Online Class and Exam Scheduling System 1.0 is vulnerable to a SQL injection attack in the file /Scheduling/pages/class_save.php . The root cause is the lack of validation for the class parameter against externally entered SQL statements. An attacker can exploit this flaw to exe...

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

PT-2025-17734 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: Code-Projects Online Class and Exam Scheduling System version 1.0 Description: A vulnerability was found in the file /Scheduling/pages/class save.php, where manipulation of the class parameter can lead to SQL injection attacks. Recommendation...

CVE-2025-44134

A vulnerability was found in Code-Projects Online Class and Exam Scheduling System 1.0 in the file /Scheduling/pages/classsave.php. Manipulation of parameter class will lead to SQL injection attacks...

CVE-2025-29568

A vulnerability has been discovered in the code-projects Online Class and Exam Scheduling System 1.0. The issue affects some unknown features in the file /Scheduling/pages/classsched.php. Manipulating the class parameter can lead to cross-site scripting XSS...