CVE-2025-3134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /addovertime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-29369

Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /viewprofile.php?id=1...

CVE-2025-3139: Buffer Copy without Checking Size of Input

A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launch the attack on the local host. The...

Code-Projects Product Management System 安全漏洞

Code-Projects Product Management System is an open source product management system from Code-Projects. A security vulnerability exists in Code-Projects Product Management System version 1.0, which stems from an incorrect manipulation of the parameter target by the Search Products menu component...

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter rate that can lead to SQL injection...

CVE-2025-29369

Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /viewprofile.php?id=1...

Code-Projects Matrimonial Site 安全漏洞

Code-Projects Matrimonial Site is an open source dating site by Code-Projects. A security vulnerability exists in Code-Projects Matrimonial Site version V1.0, which stems from a SQL injection problem in viewprofile.php...

CVE-2025-3166: Stack-based Buffer Overflow

A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affects the function searchitem of the component Search Product Menu. The manipulation of the argument target leads to stack-based buffer overflow. Local access is required to...

PT-2025-14775 · Unknown · Code-Projects Product Management System

Name of the Vulnerable Software and Affected Versions: code-projects Product Management System version 1.0 Description: A critical issue was found in the search item function of the Search Product Menu component. The manipulation of the target argument leads to a stack-based buffer overflow. Loca...

PT-2025-14569 · Code Projects · Code-Projects Payroll Management System

Name of the Vulnerable Software and Affected Versions: code-projects Payroll Management System version 1.0 Description: A critical issue has been found in the code-projects Payroll Management System. This affects an unknown part of the file /add overtime.php. The manipulation of the rate argument...

CVE-2025-29369

Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in the /view_profile.php endpoint via the id parameter. This vulnerability allows an attacker to potentially manipulate database queries, leading to unauthorized data access or modification. While no specific exploit links or real...

CVE-2025-31624

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...

BIT-GITLAB-2024-12619 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

WordPress Processing Projects plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Processing Projects versions = 1.0.2...

CVE-2025-31624

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...

CVE-2025-31624

CVE-2025-31624: Processing Projects (WordPress) has a cross-site scripting vulnerability in versions up to 1.0.2. The connected Wordfence vulnerability listing notes an authenticated (Contributor+) Stored XSS in Processing Projects, with the CVE entry not providing a published patch status in tha...

CVE-2025-31624 WordPress Processing Projects plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects allows DOM-Based XSS. This issue affects Processing Projects: from n/a through 1.0.2...

CVE-2025-31624 WordPress Processing Projects plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...

CVE-2025-2985 code-projects Payroll Management System update_account.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-31624: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...