CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 16/05/2024 |
| CVE-2024-4974 | MÉDIO6.1 | A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the pub | 16/05/2024 |
| CVE-2024-4973 | CRÍTICO9.8 | A vulnerability classified as critical was found in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument name/number/address leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and | 16/05/2024 |
| CVE-2024-4972 | CRÍTICO9.8 | A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may | 16/05/2024 |
| CVE-2024-34955 | CRÍTICO9.8 | Code-projects Budget Management 1.0 is vulnerable to SQL Injection via the delete parameter. | 15/05/2024 |
| CVE-2024-34954 | MÉDIO6.1 | Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter. | 15/05/2024 |
| CVE-2024-31610 | MÉDIO6.3 | File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file. | 25/04/2024 |
| CVE-2023-41505 | CRÍTICO9.8 | An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. | 13/03/2024 |
| CVE-2023-41504 | ALTO8.8 | SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Search function. | 13/03/2024 |
| CVE-2024-24101 | CRÍTICO9.8 | Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection under Eligibility Information Update. | 12/03/2024 |
| CVE-2024-24097 | MÉDIO5.4 | Cross Site Scripting (XSS) vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via the News Feed. | 12/03/2024 |
| CVE-2024-24093 | CRÍTICO9.8 | SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information. | 12/03/2024 |
| CVE-2024-24092 | ALTO7.8 | SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via login.php. | 12/03/2024 |
| CVE-2023-42308 | MÉDIO6.1 | Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section. | 12/03/2024 |
| CVE-2023-42307 | MÉDIO6.1 | Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section. | 12/03/2024 |
| CVE-2023-41503 | CRÍTICO9.8 | Student Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the Login function. | 07/03/2024 |
| CVE-2023-41015 | MÉDIO5.5 | code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via /Employer/DeleteJob.php?JobId=1. | 07/03/2024 |
| CVE-2023-41014 | CRÍTICO9.8 | code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer." | 07/03/2024 |