fabian has 136 CVEs on record between 2025 and 2026. The busiest recent month was December 2025 with 38. The median CVSS is 7.3 (high), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-89 (102) and CWE-74 (101). Most affected products: simple_food_ordering_system (13), e-commerce_website (12), refugee_food_management_system (12).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- simple_food_ordering_system 13
- e-commerce_website 12
- refugee_food_management_system 12
- student_file_management_system 12
- client_details_system 7
- nero_social_networking_site 6
Worst active — by depth score
CVE-2025-70152Critical· 9.8code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php66CVE-2025-70151High· 8.8code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload61CVE-2025-15208High· 7.3A security flaw has been discovered in code-projects Refugee Food Management System 1.040CVE-2025-15186High· 7.3A vulnerability has been found in code-projects Refugee Food Management System 1.040CVE-2025-15185High· 7.3A flaw has been found in code-projects Refugee Food Management System 1.040
fabian vulnerabilities
CVEs affecting fabian, newest first. Open any entry for full detail, references, and exploit status.
136 CVEsRSS
CVE-2025-70152Critical· 9.8PoCcode-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php
code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php. These endpoints lack authentication checks and directly c…
CVE-2025-70151High· 8.8PoCcode-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload
code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload. The endpoints update_profile_picture.php and upload_picture.php store uploaded files in a web-acce…
CVE-2025-15213Medium· 4.3A vulnerability has been found in code-projects Student File Management System 1.0
A vulnerability has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /download.php of the component File Download Handler. The manipulation of the argument store_id l…
CVE-2025-15211Medium· 6.3A flaw has been found in code-projects Refugee Food Management System 1.0
A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing manipulation of the argument refNo/Fname/Lname/sex/age/contact/nationality_nid can lead t…
CVE-2025-15210Medium· 6.3A security vulnerability has been detected in code-projects Refugee Food Management System 1.0
A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This vulnerability affects unknown code of the file /home/editrefugee.php. Such manipulation of the argument a/b/c/sex/d/e/nationality_nid le…
CVE-2025-15212Medium· 6.3A vulnerability was detected in code-projects Refugee Food Management System 1.0
A vulnerability was detected in code-projects Refugee Food Management System 1.0. This issue affects some unknown processing of the file /home/regfood.php. Performing manipulation of the argument a results in sql injection. Remote exploi…
CVE-2025-15186High· 7.3A vulnerability has been found in code-projects Refugee Food Management System 1.0
A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/addusers.php. Such manipulation of the argument a leads to sql injection. It is po…
CVE-2025-15185High· 7.3A flaw has been found in code-projects Refugee Food Management System 1.0
A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /home/refugeesreport.php. This manipulation of the argument a causes sql injection. It is p…
CVE-2025-15184High· 7.3A vulnerability was detected in code-projects Refugee Food Management System 1.0
A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugeesreport2.php. The manipulation of the argument a results in sql injection. The attack may be perfo…
CVE-2025-15183High· 7.3A security vulnerability has been detected in code-projects Refugee Food Management System 1.0
A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file /home/viewtakenfd.php. The manipulation of the argument tfid leads to sql injection. The attack …
CVE-2025-15182High· 7.3A weakness has been identified in code-projects Refugee Food Management System 1.0
A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of the file /home/served.php. Executing manipulation of the argument refNo can lead to sql injection. The attack can be …
CVE-2025-15181High· 7.3A security flaw has been discovered in code-projects Refugee Food Management System 1.0
A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the file /home/pagenateRefugeesList.php. Performing manipulation of the argument rfid results in sql …
CVE-2025-15209Medium· 6.3A weakness has been identified in code-projects Refugee Food Management System 1.0
A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown part of the file /home/editfood.php. This manipulation of the argument a/b/c/d causes sql injection. The attack may be initiated …
CVE-2025-15208High· 7.3A security flaw has been discovered in code-projects Refugee Food Management System 1.0
A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the file /home/editrefugee.php. The manipulation of the argument rfid results in sql injecti…
CVE-2025-15205Medium· 6.3A vulnerability was identified in code-projects Student File Management System 1.0
A vulnerability was identified in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download.php. The manipulation of the argument istore_id leads to sql injection. …
CVE-2025-15012High· 7.3A vulnerability was determined in code-projects Refugee Food Management System 1.0
A vulnerability was determined in code-projects Refugee Food Management System 1.0. The affected element is an unknown function of the file /home/home.php. This manipulation of the argument a causes sql injection. The attack is possible …
CVE-2025-14663Low· 2.4A vulnerability was determined in code-projects Student File Management System 1.0
A vulnerability was determined in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/update_student.php. Executing manipulation can lead to cross site scripting. The attack may be…
CVE-2025-14662Low· 2.4A vulnerability was found in code-projects Student File Management System 1.0
A vulnerability was found in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php of the component Update User Page. Performing manipulation results in cross site scripting. Th…
CVE-2025-14646High· 7.3A security flaw has been discovered in code-projects Student File Management System 1.0
A security flaw has been discovered in code-projects Student File Management System 1.0. This impacts an unknown function of the file /admin/delete_student.php. The manipulation of the argument stud_id results in sql injection. The attac…
CVE-2025-14645High· 7.3A vulnerability was identified in code-projects Student File Management System 1.0
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown function of the file /admin/delete_user.php. The manipulation of the argument user_id leads to sql injection. The attack is possi…
CVE-2025-14643High· 7.3A vulnerability was found in code-projects Simple Attendance Record System 2.0
A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing manipulation of the argument student results in sql injection. Remote exploita…
CVE-2025-14640High· 7.3A flaw has been found in code-projects Student File Management System 1.0
A flaw has been found in code-projects Student File Management System 1.0. The affected element is an unknown function of the file /admin/save_student.php. Executing manipulation of the argument stud_no can lead to sql injection. The att…
CVE-2025-14623High· 7.3A weakness has been identified in code-projects Student File Management System 1.0
A weakness has been identified in code-projects Student File Management System 1.0. This issue affects some unknown processing of the file /admin/update_student.php. This manipulation of the argument stud_id causes sql injection. The att…
CVE-2025-14622High· 7.3A security flaw has been discovered in code-projects Student File Management System 1.0
A security flaw has been discovered in code-projects Student File Management System 1.0. This vulnerability affects unknown code of the file /admin/save_user.php. The manipulation of the argument firstname results in sql injection. The a…
CVE-2025-14621High· 7.3A vulnerability was identified in code-projects Student File Management System 1.0
A vulnerability was identified in code-projects Student File Management System 1.0. This affects an unknown part of the file /admin/update_user.php. The manipulation of the argument user_id leads to sql injection. Remote exploitation of …
CVE-2025-14620High· 7.3A vulnerability was determined in code-projects Student File Management System 1.0
A vulnerability was determined in code-projects Student File Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/login_query.php. Executing manipulation of the argument Username can lead to sql …
CVE-2025-14619High· 7.3A vulnerability was found in code-projects Student File Management System 1.0
A vulnerability was found in code-projects Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login_query.php. Performing manipulation of the argument stud_no results in sql injecti…
CVE-2025-14537High· 7.3A weakness has been identified in code-projects Class and Exam Timetable Management 1.0
A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester cause…
CVE-2025-14536High· 7.3A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0
A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument user…
CVE-2025-14205Low· 2.4A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0
A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0. Impacted is an unknown function of the file /membership_profile.php of the component Your Info Handler. Performing manipulation of the argum…