Vulnerabilities

TI-2026-04393 CVE-2026-5035 · GHSA-5vxj-h27x-942q

code-projects Accounting System Parameter view_work.php sql injection

HIGH 70

A vulnerability has been found in code-projects Accounting System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00396 Published 2026-03-29 No fix listed CWE-74

TI-2026-04392 CVE-2026-5034 · GHSA-vr29-pvvw-gw33

code-projects Accounting System Parameter edit_costumer.php sql injection

HIGH 70

A flaw has been found in code-projects Accounting System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00334 Published 2026-03-29 No fix listed CWE-74

TI-2026-04391 CVE-2026-5033 · GHSA-57pm-w85h-x97q

code-projects Accounting System Parameter view_costumer.php sql injection

HIGH 70

A vulnerability was detected in code-projects Accounting System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00348 Published 2026-03-29 No fix listed CWE-74

TI-2024-16644 CVE-2024-25216 · GHSA-q765-9q4w-796w

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 43

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0071 Published 2024-02-14 No fix listed CWE-89

TI-2024-16643 CVE-2024-25215 · GHSA-3mpr-9r86-mfv2

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 82

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00733 Published 2024-02-14 No fix listed CWE-89

TI-2024-16642 CVE-2024-25214 · GHSA-wjx7-x5p3-4x8m

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via…

HIGH 82

An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Password parameters at /alogin.html.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00979 Published 2024-02-14 No fix listed CWE-89

TI-2024-16641 CVE-2024-25213 · GHSA-gm7v-79x8-9c9q

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 67

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00716 Published 2024-02-14 No fix listed CWE-89

TI-2024-16640 CVE-2024-25212 · GHSA-xjf9-7g5v-6jqf

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 67

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00716 Published 2024-02-14 No fix listed CWE-89

TI-2024-00462 CVE-2024-0503 · GHSA-28xx-46x6-h92x

code-projects Online FIR System registercomplaint.php cross site scripting

MEDIUM 60

A vulnerability was found in code-projects Online FIR System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00566 Published 2024-01-13 No fix listed CWE-79

TI-2023-18784 CVE-2023-37068 · GHSA-5v64-89vr-vpwr

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL…

HIGH 82

Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0116 Published 2023-08-09 No fix listed CWE-89

Vulnerabilities

Filters