3497 matches found
code-projects Patient Record Management System 安全漏洞
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter itrno in file /sputumform.php. An attacker can exploit thi...
PT-2025-23986 · Code Projects · Code-Projects Real Estate Property Management System
Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. The problem affects an unknown function of the file /Admin/Property.php...
Code-Projects Patient Record Management System 注入漏洞
Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the urinalysisform.php file parameter urinalysisid. An attacker can...
PT-2025-23023 · Unknown · Code-Projects Online Exam Mastering System
Name of the Vulnerable Software and Affected Versions: code-projects Online Exam Mastering System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability via the name field in the feedback form. This allows for potential malicious script execution. No information is...
Code-Projects Online Exam Mastering System 安全漏洞
Code-Projects Online Exam Mastering System is a Code-Projects open source online exam system. A security vulnerability exists in Code-Projects Online Exam Mastering System version 1.0, which stems from the feedback form name field being susceptible to cross-site scripting attacks...
CVE-2024-10137
A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /managemedicine.php?action=delete. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...
CVE-2024-24097
Cross Site Scripting XSS vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed...
CVE-2024-24093
SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information...
CVE-2024-24101
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update...
CVE-2024-25318
Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2...
CVE-2024-25310
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5."...
CVE-2024-25312
Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/subdelete.php?id=5."...
CVE-2024-25315
Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...
CVE-2024-24098
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed...
CVE-2024-24100
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID...
CVE-2024-24095
Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection...
CVE-2024-24099
Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Employment Status Information Update...
CVE-2024-24096
Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN...
CVE-2024-0489
A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/action/editchicken.php. The manipulation of the argument ref leads to sql injection. The attack can be initiated remotely...
CVE-2024-0464
A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file deletefaculty.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the...