Ahmadmarzook

🚨 CVE-2026-86180 A vulnerability has been found in code-projects Task Management System In PHP 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. 🎖@cveNotify

🚨 CVE-2026-86179 A flaw has been found in code-projects Daily Expense Manager 1.0. Affected is an unknown function of the file /Daily-Expense-Manager/exp ak.sql of the component Database Backup Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used. 🎖@cveNotify

🚨 CVE-2026-86168 A security flaw has been discovered in code-projects Content Management System 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument user name results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks. 🎖@cveNotify

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used.

A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

A vulnerability was identified in code-projects Doctor Appointment System 1.0. This vulnerability affects unknown code of the file /patient login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Inventory System version 1.0 **Description** A flaw in the Database Backup File Handler component, specifically within the `inventorymanagement.sql` file, allows for remote information disclosure. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Shopping System version 1.0 **Description** An issue exists in the Search Functionality component within the '/action.php' endpoint. Remote manipulation of the `keyword` argument allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Shopping System version 1.0 **Description** A remote cross site scripting issue exists within the Newsletter Subscription component in the `/offersmail.php` file. The flaw allows an attacker to execute malicious scripts by manipulating the `email` argument. Cross site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** As a temporary workaround, restrict access to the `/offersmail.php` file or avoid using the `email` argument in that endpoint until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Inventory System version 1.0 **Description** A cross site scripting issue exists in the User Registration component within the '/register.php' endpoint. A remote attacker can exploit this by manipulating the `last name` variable, allowing the execution of malicious scripts in the victim's browser. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Employee Leave Managing System version 1.0 **Description** Cross site scripting occurs in the Employee Profile Update component within the file `/EmpManageSys/editaction.php`. A remote attacker can initiate the attack by manipulating the `Name` argument. **Recommendations** Update Employee Leave Managing System version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the `/EmpManageSys/editaction.php` file.

**Name of the Vulnerable Software and Affected Versions** Simple ChatBox version 1.0 **Description** A flaw in the `SimpleChatbox PHP()` function within the `chatbox.sql` file of the Endpoint component allows for remote manipulation. This can lead to the exposure of sensitive file and directory information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple ChatBox versions prior to 1.1 **Description** A cross site scripting issue exists in the Endpoint component within the file '/chatbox/insert.php'. A remote attacker can exploit this by manipulating the `msg` argument. **Recommendations** Update to a version later than 1.0. As a temporary workaround, restrict access to the '/chatbox/insert.php' file or sanitize the `msg` argument to minimize the risk of exploitation.

A vulnerability was determined in code-projects Simple ChatBox up to 1.0. This affects an unknown part of the file /chatbox/insert.php of the component Endpoint. Executing a manipulation of the argument msg can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

Name of the Vulnerable Software and Affected Versions code-projects Patient Record Management System version 1.0 Description A weakness exists in code-projects Patient Record Management System 1.0, specifically within an unknown part of the `/db/hcpms.sql` file of the SQL Database Backup File Handler component. A manipulation can lead to information disclosure, and the attack can be launched remotely. The exploit has been made publicly available. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions code-projects Movie Ticketing System version 1.0 Description A vulnerability exists in the Movie Ticketing System that allows for information disclosure. The issue is related to the SQL Database Backup File Handler and involves manipulation of the `/db/moviedb.sql` file. The attack can be launched remotely and the exploit has been publicly disclosed. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Easy Blog Site version 1.0 **Description** Remote cross-site scripting (XSS) occurs due to improper handling of the `postTitle` argument within the `/posts/update.php` endpoint. Cross-site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** Update Easy Blog Site version 1.0 to a patched version. As a temporary workaround, restrict access to the `/posts/update.php` endpoint.

**Name of the Vulnerable Software and Affected Versions** code-projects Social Networking Site version 1.0 **Description** A cross site scripting issue exists due to the manipulation of the `content` argument within an unknown function of the file '/home.php' of the Alert Handler component. Remote exploitation is possible and the exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online Reviewer System version 1.0 **Description** A security issue exists in code-projects Online Reviewer System version 1.0. Manipulation of the `Description` argument in an unknown function within the file `/system/system/students/assessments/databank/btn functions.php` can lead to cross site scripting. This attack can be performed remotely. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Social Networking Site version 1.0 **Description** A security flaw exists in code-projects Social Networking Site 1.0. The issue affects an unknown function within the `delete photos.php` file of the Endpoint component. Manipulation of the `ID` parameter can lead to SQL injection. The attack can be carried out remotely. The exploit has been publicly released. **Recommendations** Apply a fix to address the SQL injection issue in the `delete photos.php` file. Restrict or disable access to the vulnerable function within the Endpoint component. Sanitize the `ID` parameter to prevent SQL injection attacks.