code-projects has 43 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 31 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 24. The median CVSS is 6.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-74 (24) and CWE-89 (24). Most affected products: Matrimonial System (4), Assessment Management (3), Hospital Information System (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 31 prev 0
Products
- Matrimonial System 4
- Assessment Management 3
- Hospital Information System 3
- Internship Management System 3
- library_system 3
- Hotel and Tourism Reservation in PHP 2
Worst active — by depth score
CVE-2026-108956High· 7.3A vulnerability was identified in code-projects Online Reviewer System 1.052CVE-2026-93980High· 7.3A weakness has been identified in code-projects Internship Management System 1.052CVE-2026-93979High· 7.3A security flaw has been discovered in code-projects Internship Management System 1.052CVE-2026-93978High· 7.3A vulnerability was identified in code-projects Internship Management System 1.052CVE-2026-92926High· 7.3A vulnerability has been found in code-projects Matrimonial System 1.052
code-projects vulnerabilities
CVEs affecting code-projects, newest first. Open any entry for full detail, references, and exploit status.
43 CVEsRSS
CVE-2026-85399High· 7.3PoCA security flaw has been discovered in code-projects Hospital Information System 1.0
A security flaw has been discovered in code-projects Hospital Information System 1.0. Affected by this vulnerability is the function getSinglePresp of the file includes/presp/PrespController.php. Performing a manipulation of the argument…
CVE-2025-15199Medium· 6.3A security vulnerability has been detected in code-projects College Notes Uploading System 1.0
A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file /dashboard/userprofile.php. The manipulation of the argument image leads to unrestricted upload. …
CVE-2025-15198High· 7.3A weakness has been identified in code-projects College Notes Uploading System 1.0
A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php. Executing a manipulation of the argument User can lead to sql injection. The attack ma…
CVE-2025-15196High· 7.3A vulnerability was identified in code-projects Assessment Management 1.0
A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The expl…
CVE-2025-15195High· 7.3A vulnerability was determined in code-projects Assessment Management 1.0
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked[] causes sql injection. The attac…
CVE-2025-14285High· 7.3A vulnerability was found in code-projects Employee Profile Management System 1.0
A vulnerability was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_personnel.php. The manipulation of the argument per_id results in sql injection. The attack can be launch…
CVE-2025-13580Medium· 6.3A vulnerability was determined in code-projects Library System 1.0
A vulnerability was determined in code-projects Library System 1.0. Affected is an unknown function of the file /mail.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has b…
CVE-2025-13579Medium· 6.3A vulnerability was found in code-projects Library System 1.0
A vulnerability was found in code-projects Library System 1.0. This impacts an unknown function of the file /return.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has b…
CVE-2025-13578High· 7.3A vulnerability has been found in code-projects Library System 1.0
A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initi…
CVE-2025-12315Medium· 4.7A vulnerability was determined in code-projects Food Ordering System 1.0
A vulnerability was determined in code-projects Food Ordering System 1.0. This affects an unknown function of the file /admin/menu.php. Executing a manipulation of the argument itemPrice can lead to sql injection. The attack can be execu…
CVE-2025-12314Medium· 4.7A vulnerability was found in code-projects Food Ordering System 1.0
A vulnerability was found in code-projects Food Ordering System 1.0. The impacted element is an unknown function of the file /admin/deleteitem.php. Performing a manipulation of the argument itemID results in sql injection. Remote exploit…
CVE-2025-11347High· 7.3A vulnerability was found in code-projects Student Crud Operation up to 3.3
A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function move_uploaded_file of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation resu…
CVE-2025-11343High· 7.3A security vulnerability has been detected in code-projects Student Crud Operation 3.3
A security vulnerability has been detected in code-projects Student Crud Operation 3.3. Affected is an unknown function of the file delete.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carr…