code-projects
Number 20 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
1,390
Critical
6
High
650
Known Exploited
0
Exploit available
1,332
Network, no login needed
54.3%
Of 1,390 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 357 | 0 | 186 | 130 | 41 | 0 |
| 2025 | 730 | 0 | 384 | 284 | 62 | 0 |
| 2024 | 253 | 5 | 75 | 133 | 40 | 0 |
| 2023 | 50 | 1 | 5 | 34 | 10 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Blood Bank Management System | 28 | 9 |
| Exam Form Submission | 28 | 20 |
| Patient Record Management System | 27 | 1 |
| Job Recruitment | 25 | 9 |
| Online Music Site | 23 | 18 |
| Inventory Management System | 21 | 21 |
| Online Shoe Store | 21 | 13 |
| Simple Laundry System | 21 | 13 |
| Blood Bank System | 20 | 2 |
| Library System | 20 | 14 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| SQL Injection | 1,008 | 630 |
| Cross-Site Scripting | 219 | 1 |
| Unrestricted File Upload | 62 | 10 |
| Memory Corruption | 32 | 1 |
| Information Disclosure | 14 | 0 |
| Authentication Issues | 9 | 8 |
| Cross-Site Request Forgery | 9 | 0 |
| Improper Authorization | 8 | 0 |
| Files or Directories Accessible | 4 | 0 |
| Missing Authorization | 4 | 3 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-116623 | code-projects Simple Content Management System Admin welcome.php authorization | High | 0.4% | |
| CVE-2026-108956 | code-projects Online Reviewer System User Update btn_functions.php sql injection | High | 0.3% | |
| CVE-2026-108948 | code-projects Online Reviewer System User Profile Update btn_functions.php dynamically-determined object attributes | Medium | 0.3% | |
| CVE-2026-108938 | code-projects Matrimonial System matrimony.sql file access | Medium | 0.3% | |
| CVE-2026-108937 | code-projects Online Ticket Reservation System medallion.sql file information disclosure | Medium | 0.3% | |
| CVE-2026-105188 | code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting | Low | 0.2% | |
| CVE-2026-105173 | code-projects Human Resource Management Event Creation EventStore.php cross site scripting | Low | 0.2% | |
| CVE-2026-101105 | code-projects Matrimonial System Profile Creation Endpoint create_profile processprofile_form sql injection | Medium | 0.2% | |
| CVE-2026-93980 | code-projects Internship Management System Admin Login Form login.php sql injection | High | 0.4% | |
| CVE-2026-93979 | code-projects Internship Management System login.php sql injection | High | 0.4% |