CVE-2025-29425: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

CVE-2025-29429: Improper Neutralization of Input During Web Page Generation

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/program.php via the id, code, and name parameters...

PT-2025-11540

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns SQL Injection in the exam save.php file, specifically via the member and first parameters. This allows for potential manipulation of database...

PT-2025-11534

Name of the Vulnerable Software and Affected Versions Code-projects Online Class and Exam Scheduling System version 1.0 Description The issue concerns Cross Site Scripting XSS in the /pages/program.php endpoint via the id, code, and name parameters. This allows for potential malicious script...

CVE-2025-29430: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/room.php via the id and rome parameters...

CVE-2025-29431

The Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross-Site Scripting (XSS) within the /pages/department.php endpoint. The root cause is the incorrect manipulation and lack of effective filtering or escaping of user-supplied data in the id, code, and name parameters...

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

PT-2025-11512

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A critical issue was found in the Parameter Handler component of the file /InsertCustomer.php. The manipulation of the txtName, txtAddress, cmbCity, txtEmail,...

PT-2025-11537

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A critical issue affects some unknown functionality of the file /admin/add city.php, leading to sql injection. The attack may be launched remotely. Recommendations For...

CVE-2025-2384: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument...

CVE-2025-29431: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/department.php via the id, code, and name parameters...

Code-Projects Online Class and Exam Scheduling System 安全漏洞

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects open source. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version V1.0, which stems from an incorrect manipulation of the parameters...

CVE-2025-2385: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Modern Bag 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument userEmail/userPassword leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-2054

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editstate.php. The manipulation of the argument stateid leads to sql injection. The attack can be launched...

CVE-2025-2044

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/deletebloodGroup.php. The manipulation of the argument bloodid leads to sql injection. The attack can be...

PT-2025-10023

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A critical issue has been found in the code-projects Blood Bank Management System. The vulnerability affects an unknown functionality of the file /admin/edit state.php. The...

PT-2025-10032

Name of the Vulnerable Software and Affected Versions code-projects Online Ticket Reservation System version 1.0 Description A vulnerability was found in the code-projects Online Ticket Reservation System. This issue affects unknown code of the file /passenger.php. The manipulation of the name...

CVE-2025-2061: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-2033

A vulnerability, which was classified as critical, was found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /userdashboard/viewdonor.php. The manipulation of the argument donorid leads to sql injection. It is possible to launch the attack remotely...

Code-Projects Blood Bank System 安全漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank System version 1.0, which stems from an incorrect manipulation of the parameter Bloodname that can lead to cross-site scripting attacks...