fabian has 136 CVEs on record between 2025 and 2026. The busiest recent month was December 2025 with 38. The median CVSS is 7.3 (high), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-89 (102) and CWE-74 (101). Most affected products: simple_food_ordering_system (13), e-commerce_website (12), refugee_food_management_system (12).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- simple_food_ordering_system 13
- e-commerce_website 12
- refugee_food_management_system 12
- student_file_management_system 12
- client_details_system 7
- nero_social_networking_site 6
Worst active — by depth score
CVE-2025-70152Critical· 9.8code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php66CVE-2025-70151High· 8.8code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload61CVE-2025-15208High· 7.3A security flaw has been discovered in code-projects Refugee Food Management System 1.040CVE-2025-15186High· 7.3A vulnerability has been found in code-projects Refugee Food Management System 1.040CVE-2025-15185High· 7.3A flaw has been found in code-projects Refugee Food Management System 1.040
fabian vulnerabilities
CVEs affecting fabian, newest first. Open any entry for full detail, references, and exploit status.
136 CVEsRSS
CVE-2025-12334Medium· 4.3A vulnerability was found in code-projects E-Commerce Website 1.0
A vulnerability was found in code-projects E-Commerce Website 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument prod_name/prod_desc/prod_cost results in cross site scripting. It is …
CVE-2025-12333Medium· 4.3A vulnerability has been found in code-projects E-Commerce Website 1.0
A vulnerability has been found in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/supplier_add.php. The manipulation of the argument supp_name/supp_address leads to cross site scripting. It is po…
CVE-2025-12309High· 7.3A weakness has been identified in code-projects Nero Social Networking Site 1.0
A weakness has been identified in code-projects Nero Social Networking Site 1.0. This affects an unknown part of the file /friendprofile.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch t…
CVE-2025-12308High· 7.3A security flaw has been discovered in code-projects Nero Social Networking Site 1.0
A security flaw has been discovered in code-projects Nero Social Networking Site 1.0. Affected by this issue is some unknown functionality of the file /deletemessage.php. Performing manipulation of the argument message_id results in sql …
CVE-2025-12307High· 7.3A vulnerability was identified in code-projects Nero Social Networking Site 1.0
A vulnerability was identified in code-projects Nero Social Networking Site 1.0. Affected by this vulnerability is an unknown functionality of the file /addfriend.php. Such manipulation of the argument ID leads to sql injection. The atta…
CVE-2025-12306High· 7.3A vulnerability was determined in code-projects Nero Social Networking Site 1.0
A vulnerability was determined in code-projects Nero Social Networking Site 1.0. Affected is an unknown function of the file /acceptoffres.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carri…
CVE-2025-12302Medium· 4.3A vulnerability was detected in code-projects Simple Food Ordering System 1.0
A vulnerability was detected in code-projects Simple Food Ordering System 1.0. The affected element is an unknown function of the file /editproduct.php. Performing manipulation of the argument pname/category/price results in cross site s…
CVE-2025-12301High· 7.3A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0
A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /editproduct.php. Such manipulation of the argument photo leads to unrestricted upload. The attack c…
CVE-2025-12300Medium· 4.3A weakness has been identified in code-projects Simple Food Ordering System 1.0
A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes cross site scripting. The attack can…
CVE-2025-12298Medium· 4.3A vulnerability was identified in code-projects Simple Food Ordering System 1.0
A vulnerability was identified in code-projects Simple Food Ordering System 1.0. This affects an unknown part of the file /editcategory.php. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate…
CVE-2025-12283Medium· 4.3A security flaw has been discovered in code-projects Client Details System 1.0
A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been rele…
CVE-2025-12282Low· 2.4A vulnerability was identified in code-projects Client Details System 1.0
A vulnerability was identified in code-projects Client Details System 1.0. The affected element is an unknown function of the file /admin/manage-users.php. The manipulation leads to cross site scripting. The attack can be initiated remot…
CVE-2025-12281Low· 2.4A vulnerability was determined in code-projects Client Details System 1.0
A vulnerability was determined in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/clientview.php. Executing manipulation can lead to cross site scripting. It is possible to launch the attack re…
CVE-2025-12280Low· 2.4A vulnerability was found in code-projects Client Details System 1.0
A vulnerability was found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /update-clients.php. Performing manipulation results in cross site scripting. It is possible to initiate the att…
CVE-2025-12244Medium· 4.3A vulnerability was determined in code-projects Simple E-Banking System 1.0
A vulnerability was determined in code-projects Simple E-Banking System 1.0. This affects an unknown part of the file /eBank/register.php. Executing manipulation of the argument Username can lead to cross site scripting. The attack may b…
CVE-2025-12243Medium· 6.3A vulnerability was found in code-projects Client Details System 1.0
A vulnerability was found in code-projects Client Details System 1.0. Affected by this issue is some unknown functionality of the file clientdetails/welcome.php of the component GET Parameter Handler. Performing manipulation of the argum…
CVE-2025-12238Medium· 6.3A security flaw has been discovered in code-projects Automated Voting System 1.0
A security flaw has been discovered in code-projects Automated Voting System 1.0. The affected element is an unknown function of the file /admin/user.php. Performing manipulation of the argument Username results in sql injection. The att…
CVE-2025-12299Medium· 4.3A security flaw has been discovered in code-projects Simple Food Ordering System 1.0
A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument pname/category/price results in cross site script…
CVE-2025-12279Low· 2.4A vulnerability has been found in code-projects Client Details System 1.0
A vulnerability has been found in code-projects Client Details System 1.0. This vulnerability affects unknown code of the file /welcome.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The ex…
CVE-2025-11668Medium· 4.7A vulnerability was determined in code-projects Automated Voting System 1.0
A vulnerability was determined in code-projects Automated Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/update_user.php. This manipulation of the argument Password causes sql injection. The at…
CVE-2025-11667Medium· 6.3A vulnerability was found in code-projects Automated Voting System 1.0
A vulnerability was found in code-projects Automated Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add_candidate_modal.php.. The manipulation of the argument firstname results in sql inj…
CVE-2025-11613Medium· 6.3A vulnerability was found in code-projects Simple Food Ordering System 1.0
A vulnerability was found in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file /addcategory.php. The manipulation of the argument cname results in sql injection. The attack can be launched remotel…
CVE-2025-11612Medium· 6.3A vulnerability has been found in code-projects Simple Food Ordering System 1.0
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. This impacts an unknown function of the file /addproduct.php. The manipulation of the argument Category leads to sql injection. The attack can be initiated …
CVE-2025-11609Low· 3.7A flaw has been found in code-projects Hospital Management System 1.0
A flaw has been found in code-projects Hospital Management System 1.0. Affected is the function session of the component express-session. This manipulation of the argument secret with the input secret causes use of hard-coded cryptograph…
CVE-2025-11608High· 7.3A security vulnerability has been detected in code-projects E-Banking System 1.0
A security vulnerability has been detected in code-projects E-Banking System 1.0. This affects an unknown function of the file /register.php of the component POST Parameter Handler. The manipulation of the argument username/password lead…
CVE-2025-11605Medium· 6.3A vulnerability was identified in code-projects Client Details System 1.0
A vulnerability was identified in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/update-profile.php. Such manipulation of the argument uid leads to sql injection. The attack can be executed re…
CVE-2025-11603Medium· 6.3A vulnerability was found in code-projects Simple Food Ordering System 1.0
A vulnerability was found in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /editproduct.php. The manipulation of the argument Category results in sql injection. The attack may be launc…
CVE-2025-11600Medium· 6.3A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0
A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected is an unknown function of the file editcategory.php. Such manipulation of the argument cname leads to sql injection. It is possible to …
CVE-2025-11596High· 7.3A vulnerability was determined in code-projects E-Commerce Website 1.0
A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/delete_order_details.php. Executing manipulation of the argument order_id can lead to sql injection. T…
CVE-2025-11597Medium· 6.3A vulnerability was identified in code-projects E-Commerce Website 1.0
A vulnerability was identified in code-projects E-Commerce Website 1.0. The impacted element is an unknown function of the file /pages/product_add_qty.php. The manipulation of the argument prod_id leads to sql injection. The attack is po…