fabian has 136 CVEs on record between 2025 and 2026. The busiest recent month was December 2025 with 38. The median CVSS is 7.3 (high), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-89 (102) and CWE-74 (101). Most affected products: simple_food_ordering_system (13), e-commerce_website (12), refugee_food_management_system (12).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- simple_food_ordering_system 13
- e-commerce_website 12
- refugee_food_management_system 12
- student_file_management_system 12
- client_details_system 7
- nero_social_networking_site 6
Worst active — by depth score
CVE-2025-70152Critical· 9.8code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php66CVE-2025-70151High· 8.8code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload61CVE-2025-15208High· 7.3A security flaw has been discovered in code-projects Refugee Food Management System 1.040CVE-2025-15186High· 7.3A vulnerability has been found in code-projects Refugee Food Management System 1.040CVE-2025-15185High· 7.3A flaw has been found in code-projects Refugee Food Management System 1.040
fabian vulnerabilities
CVEs affecting fabian, newest first. Open any entry for full detail, references, and exploit status.
136 CVEsRSS
CVE-2025-14251High· 7.3A security vulnerability has been detected in code-projects Online Ordering System 1.0
A security vulnerability has been detected in code-projects Online Ordering System 1.0. This affects an unknown function of the file /admin/ of the component Admin Login. Such manipulation of the argument Username leads to sql injection.…
CVE-2025-14250High· 7.3A weakness has been identified in code-projects Online Ordering System 1.0
A weakness has been identified in code-projects Online Ordering System 1.0. The impacted element is an unknown function of the file /user_contact.php. This manipulation of the argument Name causes sql injection. It is possible to initiat…
CVE-2025-14249High· 7.3A security flaw has been discovered in code-projects Online Ordering System 1.0
A security flaw has been discovered in code-projects Online Ordering System 1.0. The affected element is an unknown function of the file /user_school.php. The manipulation of the argument product_id results in sql injection. The attack m…
CVE-2025-14248High· 7.3A vulnerability was identified in code-projects Simple Shopping Cart 1.0
A vulnerability was identified in code-projects Simple Shopping Cart 1.0. Impacted is an unknown function of the file /adminlogin.php. The manipulation of the argument admin_username leads to sql injection. The attack is possible to be c…
CVE-2025-14247Medium· 6.3A vulnerability was determined in code-projects Simple Shopping Cart 1.0
A vulnerability was determined in code-projects Simple Shopping Cart 1.0. This issue affects some unknown processing of the file /Admin/additems.php. Executing manipulation of the argument item_name can lead to sql injection. The attack …
CVE-2025-14246Medium· 6.3A vulnerability was found in code-projects Simple Shopping Cart 1.0
A vulnerability was found in code-projects Simple Shopping Cart 1.0. This vulnerability affects unknown code of the file /Customers/settings.php. Performing manipulation of the argument user_id results in sql injection. Remote exploitati…
CVE-2025-14218High· 7.3A security flaw has been discovered in code-projects Currency Exchange System 1.0
A security flaw has been discovered in code-projects Currency Exchange System 1.0. The affected element is an unknown function of the file /editotheraccount.php. Performing manipulation of the argument ID results in sql injection. It is …
CVE-2025-14217High· 7.3A vulnerability was identified in code-projects Currency Exchange System 1.0
A vulnerability was identified in code-projects Currency Exchange System 1.0. Impacted is an unknown function of the file /edittrns.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote…
CVE-2025-14216High· 7.3A vulnerability was determined in code-projects Currency Exchange System 1.0
A vulnerability was determined in code-projects Currency Exchange System 1.0. This issue affects some unknown processing of the file /viewserial.php. This manipulation of the argument ID causes sql injection. The attack is possible to be…
CVE-2025-14215High· 7.3A vulnerability was found in code-projects Currency Exchange System 1.0
A vulnerability was found in code-projects Currency Exchange System 1.0. This vulnerability affects unknown code of the file /edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. Th…
CVE-2025-13576Medium· 6.3A vulnerability was detected in code-projects Blog Site 1.0
A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. T…
CVE-2025-13575Medium· 6.3A security vulnerability has been detected in code-projects Blog Site 1.0
A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function category_exists of the file /resources/functions/blog.php of the component Category Handler. Such manipulation of the argument name/field…
CVE-2025-13574Medium· 4.7A weakness has been identified in code-projects Online Bidding System 1.0
A weakness has been identified in code-projects Online Bidding System 1.0. This issue affects the function categoryadd of the file /administrator/addcategory.php. This manipulation of the argument catimage causes unrestricted upload. The…
CVE-2025-13571Medium· 6.3A vulnerability was determined in code-projects Simple Food Ordering System 1.0
A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /listorder.php. Executing manipulation of the argument ID can lead to sql injection. The at…
CVE-2025-13279Medium· 6.3A vulnerability was found in code-projects Nero Social Networking Site 1.0
A vulnerability was found in code-projects Nero Social Networking Site 1.0. The affected element is an unknown function of the file /profilefriends.php. Performing manipulation of the argument ID results in sql injection. The attack may …
CVE-2025-13277High· 7.3A flaw has been found in code-projects Nero Social Networking Site 1.0
A flaw has been found in code-projects Nero Social Networking Site 1.0. This issue affects some unknown processing of the file /friendsphoto.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remo…
CVE-2025-13290Medium· 6.3A vulnerability has been found in code-projects Simple Food Ordering System 1.0
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.php. Such manipulation of the argument ID leads to sql injection. It is possible…
CVE-2025-13203High· 7.3A weakness has been identified in code-projects Simple Cafe Ordering System 1.0
A weakness has been identified in code-projects Simple Cafe Ordering System 1.0. This vulnerability affects unknown code of the file /addmem.php. Executing manipulation of the argument studentnum can lead to sql injection. It is possible…
CVE-2025-13202Low· 3.5A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0
A security flaw has been discovered in code-projects Simple Cafe Ordering System 1.0. This affects an unknown part of the file /add_to_cart. Performing manipulation of the argument product_name results in cross site scripting. It is poss…
CVE-2025-13201High· 7.3A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0
A vulnerability was identified in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack m…
CVE-2025-13199Medium· 5.3A vulnerability was found in code-projects Email Logging Interface 2.0
A vulnerability was found in code-projects Email Logging Interface 2.0. Affected is an unknown function of the file signup.cpp. The manipulation of the argument Username results in path traversal: '../filedir'. The attack is only possibl…
CVE-2025-13170High· 7.3A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0
A vulnerability was detected in code-projects Simple Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /admin/edit_account.php. Performing a manipulation of the argument admin_id results in sql i…
CVE-2025-13169High· 7.3A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0
A security vulnerability has been detected in code-projects Simple Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /add_query_reserve.php. Such manipulation of the argument room_id leads to sql in…
CVE-2025-12928High· 7.3A vulnerability was detected in code-projects Online Job Search Engine 1.0
A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument username/phone results in sql injection. The attack is possible …
CVE-2025-12913Medium· 4.7A flaw has been found in code-projects Responsive Hotel Site 1.0
A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remot…
CVE-2025-12857Medium· 4.7A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0
A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection. The attack …
CVE-2025-12856Medium· 4.7A weakness has been identified in code-projects Responsive Hotel Site 1.0
A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.php. This manipulation of the argument email causes sql injection. The attack can be initiated remo…
CVE-2025-12855Medium· 4.7A security flaw has been discovered in code-projects Responsive Hotel Site 1.0
A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processing of the file /admin/newsletterdel.php. The manipulation of the argument eid results in sql injection. It is possibl…
CVE-2025-12378High· 7.3A security flaw has been discovered in code-projects Simple Food Ordering System 1.0
A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addproduct.php. Performing manipulation of the argument photo results in unrestricted upload. T…
CVE-2025-12335Medium· 4.3A vulnerability was determined in code-projects E-Commerce Website 1.0
A vulnerability was determined in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supplier_update.php. This manipulation of the argument supp_name/supp_address causes cr…