Vulnerabilities in code-projects

1,282 results
Vexday analysis

O portfólio de vulnerabilidades do vendor code-projects acumula 1.281 CVEs catalogadas, com volume expressivo de entradas recentes — 136 apenas nos últimos 90 dias —, o que indica ritmo elevado de descobertas e atenção crescente da comunidade de pesquisa. A falha mais frequente é CWE-89 (injeção de SQL), padrão que tende a ser explorado de forma sistemática, e 146 CVEs já possuem prova de conceito pública disponível, reduzindo a barreira técnica para possíveis atacantes. A CVE mais perigosa ativa no momento é CVE-2023-7137, com score EPSS de 0,1703, o maior registrado no conjunto — embora nenhuma CVE desse vendor figure no catálogo KEV da CISA, taxa abaixo da média geral do catálogo. A combinação de PoCs públicas numerosas, falhas de injeção recorrentes e cadência alta de novas vulnerabilidades recomenda atenção prioritária a revisões de código e controles de entrada em projetos que utilizem componentes desse vendor.

CVE-2025-7594MEDIUMcode-projects Job Diary view-emp.php sql injectionEPSS 0.4%CVE-2025-7752MEDIUMcode-projects Online Appointment Booking System deletedoctor.php sql injectionEPSS 0.4%CVE-2025-7593MEDIUMcode-projects Job Diary view-all.php sql injectionEPSS 0.4%CVE-2025-12256MEDIUMcode-projects Online Event Judging System edit_contestant.php sql injectionEPSS 0.4%CVE-2025-7605MEDIUMcode-projects AVL Rooms profile.php sql injectionEPSS 0.4%CVE-2025-7595MEDIUMcode-projects Job Diary view-cad.php sql injectionEPSS 0.4%CVE-2025-11667MEDIUMcode-projects Automated Voting System add_candidate_modal.php. sql injectionEPSS 0.4%CVE-2025-6612MEDIUMcode-projects Inventory Management System removeCategories.php sql injectionEPSS 0.4%CVE-2025-6480MEDIUMcode-projects Simple Pizza Ordering System addcatexec.php sql injectionEPSS 0.4%CVE-2025-6304MEDIUMcode-projects Online Shoe Store cart.php sql injectionEPSS 0.4%CVE-2025-7474MEDIUMcode-projects Job Diary search.php sql injectionEPSS 0.4%CVE-2025-7533MEDIUMcode-projects Job Diary view-details.php sql injectionEPSS 0.4%CVE-2025-7861MEDIUMcode-projects Church Donation System search.php sql injectionEPSS 0.4%CVE-2025-6316MEDIUMcode-projects Online Shoe Store admin_running.php sql injectionEPSS 0.4%CVE-2025-6471MEDIUMcode-projects Online Bidding System administrator sql injectionEPSS 0.4%CVE-2025-7513MEDIUMcode-projects Modern Bag slideupdate.php sql injectionEPSS 0.4%CVE-2025-7516MEDIUMcode-projects Online Appointment Booking System cancelbookingpatient.php sql injectionEPSS 0.4%CVE-2025-6418MEDIUMcode-projects Simple Online Hotel Reservation System edit_query_account.php sql injectionEPSS 0.4%CVE-2025-6481MEDIUMcode-projects Simple Pizza Ordering System update.php sql injectionEPSS 0.4%CVE-2025-6483MEDIUMcode-projects Simple Pizza Ordering System edituser.php sql injectionEPSS 0.4%