412 results
9.8Critical
CVE-2025-70152
fabian scholars tracking system

code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints lack authentication checks and directly concatenate user-suppli…

8.8High
CVE-2025-70151
fabian scholars tracking system

code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-accessible uploads/ direct…

7.3High
CVE-2026-2223

code-projects Online Reviewer System index.php sql injection

code-projects Online Reviewer System

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. Affected by this issue is some unknown functionality of the file /system/system/students/assessments/pretest/take/index.php. The manipulation of the argument ID leads to s…

7.3High
CVE-2026-2221

code-projects Online Reviewer System Login index.php sql injection

code-projects Online Reviewer System

A security flaw has been discovered in code-projects Online Reviewer System 1.0. Affected is an unknown function of the file /login/index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. The attack is po…

7.3High
CVE-2026-2220

code-projects Online Reviewer System btn_functions.php sql injection

code-projects Online Reviewer System

A vulnerability was identified in code-projects Online Reviewer System 1.0. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php. Such manipulation of the argument difficulty_id leads to sql injection. The a…

2.4Low
CVE-2026-2214

code-projects for Plugin AdminAddAlbum.php cross site scripting

code-projects for Plugin

A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/PHP/AdminAddAlbum.php. This manipulation of the argument txtalbum causes cross site scripting. It is possible to initiate the attack remote…

7.3High
CVE-2026-2199

code-projects Online Reviewer System user-delete.php sql injection

code-projects Online Reviewer System

A security flaw has been discovered in code-projects Online Reviewer System 1.0. The impacted element is an unknown function of the file /reviewer/system/system/admins/manage/users/user-delete.php. Performing a manipulation of the argument ID results in sql i…

7.3High
CVE-2026-2198

code-projects Online Reviewer System loaddata.php sql injection

code-projects Online Reviewer System

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /system/system/admins/assessments/pretest/loaddata.php. Such manipulation of the argument difficulty_id leads to sql injection.…

7.3High
CVE-2026-2197

code-projects Online Reviewer System exam-delete.php sql injection

code-projects Online Reviewer System

A vulnerability was determined in code-projects Online Reviewer System 1.0. Impacted is an unknown function of the file /system/system/admins/assessments/pretest/exam-delete.php. This manipulation of the argument test_id causes sql injection. It is possible t…

7.3High
CVE-2026-2196

code-projects Online Reviewer System exam-update.php sql injection

code-projects Online Reviewer System

A vulnerability was found in code-projects Online Reviewer System 1.0. This issue affects some unknown processing of the file /system/system/admins/assessments/pretest/exam-update.php. The manipulation of the argument test_id results in sql injection. The att…

6.3Medium
CVE-2026-2176

code-projects Contact Management System index.py sql injection

code-projects Contact Management System

A security vulnerability has been detected in code-projects Contact Management System 1.0. This issue affects some unknown processing of the file index.py. Such manipulation of the argument selecteditem[0] leads to sql injection. The attack can be executed re…

7.3High
CVE-2026-2173

code-projects Online Examination System login.php sql injection

code-projects Online Examination System

A vulnerability was identified in code-projects Online Examination System 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated r…

7.3High
CVE-2026-2166

code-projects Online Reviewer System Login index.php sql injection

code-projects Online Reviewer System

A security vulnerability has been detected in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /login/index.php of the component Login. The manipulation of the argument username/password leads to sql injection.…