PT-2026-6997

Name of the Vulnerable Software and Affected Versions code-projects Online Reviewer System version 1.0 Description A security issue exists in code-projects Online Reviewer System 1.0 related to SQL injection. The issue is located in the Login component, specifically within the file...

Code-Projects Online Application System for Admission SQL注入漏洞

Code-Projects Online Application System for Admission is an online application system developed by Code-Projects. Version 1.0 of the Code-Projects Online Application System for Admission contains a SQL injection vulnerability. This vulnerability stems from incorrect operations with the...

Code-Projects Online Examination System SQL注入漏洞

The Code-Projects Online Examination System is an open-source online examination system developed by Code-Projects. Version 1.0 of the Code-Projects Online Examination System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of parameters username and password in...

CVE-2026-2166: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attack is possible to be carried...

CVE-2026-2133: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in code-projects Online Music Site 1.0. Impacted is an unknown function of the file /Administrator/PHP/AdminUpdateCategory.php. This manipulation of the argument txtimage causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has...

Code-Projects Online Student Management System SQL注入漏洞

Code-Projects Online Student Management System is an open-source online student management system developed by Code-Projects. Version 1.0 of the Code-Projects Online Student Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of parameters userna...

Code-Projects Contact Management System SQL注入漏洞

Code-Projects Contact Management System is an open-source contact management system developed by Code-Projects. Version 1.0 of the Code-Projects Contact Management System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the parameter selecteditem0 in the...

CVE-2026-2083

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /deletepost.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

CVE-2026-2083

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /deletepost.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

CVE-2026-2083

CVE-2026-2083 affects code-projects Social Networking Site 1.0. The flaw is in the unknown function of the file /delete_post.php ; manipulating the ID argument yields an SQL injection . It is remotely exploitable and the exploit has been publicly released. Multiple sources (NVD, Red Hat, CVE list...

CVE-2026-2083 code-projects Social Networking Site delete_post.php sql injection

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /deletepost.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

CVE-2026-2083 code-projects Social Networking Site delete_post.php sql injection

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /deletepost.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

PT-2026-6901

Name of the Vulnerable Software and Affected Versions code-projects Social Networking Site version 1.0 Description A security flaw exists in code-projects Social Networking Site 1.0. The issue is related to SQL injection in an unknown function within the /delete post.php file. Manipulating the ID...

Code-Projects Social Networking Site SQL注入漏洞

Code-Projects Social Networking Site is an open-source social networking site developed by Code-Projects. Version 1.0 of Code-Projects Social Networking Site has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the file /deletepost.php, which...

CVE-2026-2083: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Social Networking Site 1.0. This affects an unknown function of the file /deletepost.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to th...

CVE-2026-2060

Summary: CVE-2026-2060 affects code-projects’ Simple Blood Donor Management System 1.0. The vulnerability is in the file /simpleblooddonor/editcampaignform.php, where manipulating the ID parameter results in an SQL injection. The issue is exploitable remotely and the exploit has been publicly dis...

CVE-2025-27550

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server...

Code-Projects Simple Blood Donor Management System SQL注入漏洞

Code-Projects Simple Blood Donor Management System is an easy-to-use blood donor management system developed by Code-Projects. Version 1.0 of the Code-Projects Simple Blood Donor Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the paramete...

CVE-2025-27550

IBM Jazz Reporting Service could allow an authenticated user on the host network to obtain sensitive information about other projects that reside on the server...

CVE-2025-27550

CVE-2025-27550 concerns IBM Jazz Reporting Service (LQE). The issue: an authenticated user on the host network could obtain sensitive information about other projects resident on the server, indicating an information-disclosure vulnerability. IBM bulletin details affected products/versions and fi...