fabian has 136 CVEs on record between 2025 and 2026. The busiest recent month was December 2025 with 38. The median CVSS is 7.3 (high), with 1 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-89 (102) and CWE-74 (101). Most affected products: simple_food_ordering_system (13), e-commerce_website (12), refugee_food_management_system (12).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- simple_food_ordering_system 13
- e-commerce_website 12
- refugee_food_management_system 12
- student_file_management_system 12
- client_details_system 7
- nero_social_networking_site 6
Worst active — by depth score
CVE-2025-70152Critical· 9.8code-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in the admin user management endpoints /admin/save_user.php and /admin/update_user.php66CVE-2025-70151High· 8.8code-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote code execution via unrestricted file upload61CVE-2025-15208High· 7.3A security flaw has been discovered in code-projects Refugee Food Management System 1.040CVE-2025-15186High· 7.3A vulnerability has been found in code-projects Refugee Food Management System 1.040CVE-2025-15185High· 7.3A flaw has been found in code-projects Refugee Food Management System 1.040
fabian vulnerabilities
CVEs affecting fabian, newest first. Open any entry for full detail, references, and exploit status.
136 CVEsRSS
CVE-2025-11105High· 7.3A flaw has been found in code-projects Simple Scheduling System 1.0
A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the at…
CVE-2025-11094High· 7.3A security vulnerability has been detected in code-projects E-Commerce Website 1.0
A security vulnerability has been detected in code-projects E-Commerce Website 1.0. This affects an unknown part of the file /pages/admin_product_details.php. Such manipulation of the argument prod_id leads to sql injection. The attack m…
CVE-2025-11124Low· 3.5A vulnerability has been found in code-projects Project Monitoring System 1.0
A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. Th…
CVE-2025-11115High· 7.3A vulnerability has been found in code-projects Simple Scheduling System 1.0
A vulnerability has been found in code-projects Simple Scheduling System 1.0. Affected by this issue is some unknown functionality of the file /addtime.php. The manipulation of the argument starttime/endtime leads to sql injection. Remot…
CVE-2025-11116High· 7.3A vulnerability was found in code-projects Simple Scheduling System 1.0
A vulnerability was found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /add.home.php. The manipulation of the argument faculty results in sql injection. The attack can be executed remotely. The …
CVE-2025-11074High· 7.3A flaw has been found in code-projects Project Monitoring System 1.0
A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiat…
CVE-2025-11066High· 7.3A flaw has been found in code-projects Online Bidding System 1.0
A flaw has been found in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/bidlist.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched re…
CVE-2025-11055High· 7.3A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0
A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/updateaddress.php. The manipulation of the argument address results in sql injection. The attack may b…
CVE-2025-11036High· 7.3A vulnerability was identified in code-projects E-Commerce Website 1.0
A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/admin_account_update.php. Such manipulation of the argument user_id leads to sql injection. The attack can be lau…
CVE-2025-11037High· 7.3A security flaw has been discovered in code-projects E-Commerce Website 1.0
A security flaw has been discovered in code-projects E-Commerce Website 1.0. This impacts an unknown function of the file /pages/admin_index_search.php. Performing manipulation of the argument Search results in sql injection. The attack …
CVE-2025-10843High· 7.3A flaw has been found in Reservation Online Hotel Reservation System 1.0
A flaw has been found in Reservation Online Hotel Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /reservation/paypalpayout.php. Executing manipulation of the argument confirm can lead to sq…
CVE-2025-10842High· 7.3A vulnerability was detected in code-projects Online Bidding System 1.0
A vulnerability was detected in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/wew.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated…
CVE-2025-10841High· 7.3A security vulnerability has been detected in code-projects Online Bidding System 1.0
A security vulnerability has been detected in code-projects Online Bidding System 1.0. This impacts an unknown function of the file /administrator/weweee.php. Such manipulation of the argument ID leads to sql injection. The attack can be…
CVE-2025-10837Low· 3.5A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0
A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cros…
CVE-2025-10623High· 7.3A vulnerability was identified in SourceCodester Hotel Reservation System 1.0
A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch …
CVE-2025-10621High· 7.3A vulnerability was determined in SourceCodester Hotel Reservation System 1.0
A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initia…