EUVD-2026-72056

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86168 code-projects Content Management System login.php sql injection

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86168

A SQL injection vulnerability exists in code-projects Content Management System 1.0 , specifically in the user_name parameter of the /login.php file. The flaw can be exploited remotely without authentication , resulting in partial impact to confidentiality, integrity, and availability (CVSS 3.1 s...

CVE-2026-86168 code-projects Content Management System login.php sql injection

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86216: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in code-projects Hotel and Tourism Reservation in PHP 1.0. This impacts an unknown function of the file /ht/details.php. The manipulation of the argument room leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2026-86180: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The...

PT-2026-86479

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument user name results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-86181: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The attack can be...

CVE-2026-86168: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument username results in sql injection. The attack can be executed remotely. The exploit has been released to the...

CVE-2026-85643

code-projects Online Shopping System 1.0 is vulnerable to SQL injection in the mysqli_query function within admin/adduser.php , via manipulation of the mobile argument. The attack is exploitable remotely but requires high privileges (authenticated admin access). CVSS 3.1 scores it 4.7 (MEDIUM) wi...

CVE-2026-85517

A sensitive information disclosure vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the file /vehicle_management.sql handled by the SQL Database Backup File Handler . An unknown function in this component allows an unauthenticated remote attacker to disclose s...

CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-85516

A SQL injection vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the busid parameter of the file /busprofile.php. The vulnerability can be exploited remotely without authentication via manipulation of that argument. CVSS 3.1 rates it 7.3 (HIGH) with low impact...

CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85516 code-projects Vehicle Management System busprofile.php sql injection

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...

CVE-2026-85399

A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated...

CVE-2026-85402

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...

CVE-2026-85403 code-projects Doctor Appointment System contactus.php sql injection

A flaw has been found in code-projects Doctor Appointment System 1.0. This issue affects some unknown processing of the file /contactus.php. This manipulation of the argument firstname causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2026-85402 code-projects Doctor Appointment System booking.php sql injection

A vulnerability was detected in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient/booking.php. The manipulation of the argument docid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...