PT-2025-31733 · Code Projects · Online Farm System

Name of the Vulnerable Software and Affected Versions: code-projects Online Farm System version 1.0 Description: A critical issue exists in code-projects Online Farm System 1.0. The vulnerability is due to a SQL injection flaw within an unknown function of the file /forgot passfarmer.php. The ema...

Code-Projects Online Farm System Injection Vulnerability

Code-Projects Online Farm System is a Code-Projects open source online farm system. An injection vulnerability exists in Code-Projects Online Farm System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter email in the file /forgotpassfarmer.php...

CVE-2025-8467: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

CVE-2025-8466: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgotpassfarmer.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

PT-2025-31756 · Unknown · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: code-projects Intern Membership Management System version 1.0 Description: A critical vulnerability exists in code-projects Intern Membership Management System 1.0. The vulnerability affects unknown code within the /admin/edit student query.p...

PT-2025-31758 · Code Projects · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: code-projects Intern Membership Management System version 1.0 Description: A critical issue exists in code-projects Intern Membership Management System 1.0 related to the processing of the /admin/delete student.php API endpoint. Manipulation ...

CVE-2025-8443 code-projects Online Medicine Guide login.php sql injection

A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-8441 code-projects Online Medicine Guide pharsignup.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /pharsignup.php. The manipulation of the argument phuname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-8435 code-projects Online Movie Streaming admin-control.php authorization

A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-control.php. The manipulation of the argument ID leads to missing authorization. The attack can be launched...

Code-Projects Kitchen Treasure Injection Vulnerability

Code-Projects Kitchen Treasure is an open source kitchen software from Code-Projects. An injection vulnerability exists in code-projects Kitchen Treasure version 1.0, which results from SQL injection due to incorrect manipulation of the parameter email in the file /userregistration.php...

PT-2025-31600 · Unknown · Code-Projects Online Movie Streaming

Name of the Vulnerable Software and Affected Versions: code-projects Online Movie Streaming version 1.0 Description: A critical issue exists in code-projects Online Movie Streaming 1.0 related to missing authorization. The vulnerability is located in an unknown function within the /admin.php file...

Code-Projects Document Management System Path Traversal Vulnerability

Code-Projects Document Management System is an open source document management system from Code-Projects. A path traversal vulnerability exists in Code-Projects Document Management System version 1.0, which arises from a path traversal vulnerability due to incorrect manipulation of the parameter ...

CVE-2025-51504

Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...

Microweber CMS security vulnerabilities

Microweber CMS is a drag-and-drop website builder from Microweber Open Source. A security vulnerability exists in Microweber CMS version 2.0, which stems from cross-site scripting in the last name field in the /projects/profile and homepage endpoints...

PT-2025-31622 · Code Projects · Online Medicine Guide

Name of the Vulnerable Software and Affected Versions: code-projects Online Medicine Guide version 1.0 Description: A critical vulnerability has been identified in code-projects Online Medicine Guide version 1.0. The vulnerability affects an unknown functionality of the /cussignup.php file...

CVE-2025-51504

Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...

CVE-2025-8441: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /pharsignup.php. The manipulation of the argument phuname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-51504: Improper Neutralization of Input During Web Page Generation

Microweber CMS 2.0 is vulnerable to Cross Site Scripting XSSin the /projects/profile, homepage endpoint via the last name field...

CVE-2025-8438: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown code of the file /controllers/postpublish.php. The manipulation of the argument post leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed...

CVE-2025-8434: Missing Authorization

A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been classified as critical. Affected is an unknown function of the file /admin.php. The manipulation of the argument ID leads to missing authorization. It is possible to launch the attack remotely. The exploit has been...