CVE-2024-8762

CVE-2024-8762 affects code-projects Crud Operation System 1.0. The vulnerability is an SQL injection in the /updatedata.php file caused by unsafe handling of the sid parameter, exploitable remotely. Multiple sources corroborate that the impact can compromise confidentiality, integrity, and availa...

CVE-2024-8868

CVE-2024-8868 affects code-projects Crud Operation System 1.0. The vulnerability is a SQL injection in the savedata.php processing path, triggered by manipulating the sname parameter. Impact is described as critical, with remote attack capability and publicly disclosed exploit. Affected component...

CVE-2024-11820

CVE-2024-11820 affects the open-source project Code-Projects Crud Operation System 1.0 . The vulnerability is a cross-site scripting (XSS) flaw in the handling of the saddress parameter of the file /add.php . The root cause is indicated as the manipulation of this argument leading to XSS. The iss...

CVE-2024-9011

The CVE-2024-9011 issue affects code-projects Crud Operation System 1.0, specifically an unknown function in updata.php where manipulating the sid parameter enables SQL injection. The vulnerability can be exploited remotely and has public exploit disclosure. The connected PT-2024-39365 entry prov...

CVE-2024-9812

Summary (CVE-2024-9812) A SQL injection flaw exists in code-projects Crud Operation System 1.0, affecting the delete.php file via manipulation of the “sid” parameter. The issue is exploitable remotely and can impact confidentiality, integrity, and availability as described in multiple sources. Th...

CVE-2025-11347

CVE-2025-11347 affects code-projects Student Crud Operation up to 3.3, where the function move_uploaded_file in add.php allows unrestricted file upload. The vulnerability can be triggered remotely and the exploit has been publicized. Affected versions are stated as up to 3.3; sources suggest that...

CVE-2025-11343

The CVE-2025-11343 entry concerns code-projects Student Crud Operation 3.3, specifically the delete.php file. The vulnerability is a SQL injection triggered by unsafely handling the ID parameter, enabling remote exploitation. Public exploitation is indicated in the documents, with multiple source...