CVE-2025-56289: Improper Neutralization of Input During Web Page Generation

code-projects Document Management System 1.0 has a Cross Site Scripting XSS vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files...

CVE-2025-8433: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in code-projects Document Management System 1.0 and classified as critical. This issue affects the function unlink of the file /dell.php. The manipulation of the argument ID leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to...

PT-2025-30936 · Unknown · Code-Projects Document Management System

Name of the Vulnerable Software and Affected Versions: code-projects Document Management System version 1.0 Description: A critical issue has been found in code-projects Document Management System that allows for unrestricted file upload through manipulation of the uploaded file argument in the...

CVE-2025-8171: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0. This issue affects some unknown processing of the file /insert.php. The manipulation of the argument uploadedfile leads to unrestricted upload. The attack may be initiated remotely...