CVE-2025-3134

CVE-2025-3134 affects Code-Projects Payroll Management System 1.0. The vulnerability is in the add_overtime.php (also referenced as /add overtime.php) where improper handling of the rate parameter allows SQL injection, enabling remote exploitation. Exploitation is disclosed publicly. Remediation ...

Code-Projects Product Management System 安全漏洞

Code-Projects Product Management System is an open source product management system from Code-Projects. A security vulnerability exists in Code-Projects Product Management System version 1.0, which stems from an incorrect manipulation of the parameter target by the Search Products menu component...

PT-2025-14569 · Code Projects · Code-Projects Payroll Management System

Name of the Vulnerable Software and Affected Versions: code-projects Payroll Management System version 1.0 Description: A critical issue has been found in the code-projects Payroll Management System. This affects an unknown part of the file /add overtime.php. The manipulation of the rate argument...

Code-Projects Matrimonial Site 安全漏洞

Code-Projects Matrimonial Site is an open source dating site by Code-Projects. A security vulnerability exists in Code-Projects Matrimonial Site version V1.0, which stems from a SQL injection problem in viewprofile.php...

CVE-2025-29369

Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in the /view_profile.php endpoint via the id parameter. This vulnerability allows an attacker to potentially manipulate database queries, leading to unauthorized data access or modification. While no specific exploit links or real...

CVE-2025-29369

Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /viewprofile.php?id=1...

PT-2025-14775 · Unknown · Code-Projects Product Management System

Name of the Vulnerable Software and Affected Versions: code-projects Product Management System version 1.0 Description: A critical issue was found in the search item function of the Search Product Menu component. The manipulation of the target argument leads to a stack-based buffer overflow. Loca...

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter rate that can lead to SQL injection...

Code-Projects Bus Reservation System 安全漏洞

Code-Projects Bus Reservation System is an open source bus reservation system from Code-Projects. A security vulnerability exists in Code-Projects Bus Reservation System version 1.0, which stems from an incorrect manipulation of the parameter Str1 that can lead to a buffer overflow...

CVE-2025-29369

Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /viewprofile.php?id=1...

Code-Projects Product Management System 安全漏洞

Code-Projects Product Management System is an open source product management system from Code-Projects. A security vulnerability exists in Code-Projects Product Management System version 1.0, which stems from an incorrect manipulation of the parameter Str1 that can lead to a buffer overflow...

CVE-2025-3166: Stack-based Buffer Overflow

A vulnerability classified as critical was found in code-projects Product Management System 1.0. This vulnerability affects the function searchitem of the component Search Product Menu. The manipulation of the argument target leads to stack-based buffer overflow. Local access is required to...

CVE-2025-3139: Buffer Copy without Checking Size of Input

A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launch the attack on the local host. The...

CVE-2025-29369: Improper Neutralization of Special Elements used in an SQL Command

Code-Projects Matrimonial Site V1.0 is vulnerable to SQL Injection in /viewprofile.php?id=1...

CVE-2025-3134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /addovertime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-2985 code-projects Payroll Management System update_account.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...

PT-2025-13677 · Code Projects · Code-Projects Payroll Management System

Name of the Vulnerable Software and Affected Versions: code-projects Payroll Management System version 1.0 Description: A critical issue has been found in the system, affecting the file update account.php. The manipulation of the deduction argument leads to SQL injection. This issue can be...

CVE-2025-3039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

CVE-2025-2985: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...

CVE-2025-2973: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, was found in code-projects College Management System 1.0. This affects an unknown part of the file /Admin/student.php. The manipulation of the argument profileimage leads to unrestricted upload. It is possible to initiate the attack remotely. The...