Ahmadmarzouk

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card activation.sql of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used.

A vulnerability was found in code-projects Hospital Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /HIS/his.sql of the component SQL Database Backup File Handler. Performing a manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

A vulnerability has been found in code-projects Hospital Information System 1.0. Affected is an unknown function of the file /HIS/src/patients/editPatient.php of the component Patient Management. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation in PHP version 1.0 **Description** A remote cross-site scripting issue exists in the `/ht/details.php` file. The flaw allows an attacker to execute malicious scripts by manipulating the `room` argument. **Recommendations** As a temporary mitigation, restrict access to the `/ht/details.php` endpoint or avoid using the `room` argument until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Hotel and Tourism Reservation version 1.0 **Description** An information disclosure issue exists in the Database Backup Handler component within the file `/ht/hotel db%20(1).sql`. This flaw allows a remote attacker to obtain sensitive information through the manipulation of an unknown function. **Recommendations** Restrict access to the file `/ht/hotel db%20(1).sql` to prevent unauthorized information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

🚨 CVE-2026-86181 A vulnerability was found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/UpdateUserProfile.php of the component User Profile Update. The manipulation of the argument lname results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used. 🎖@cveNotify

**Name of the Vulnerable Software and Affected Versions** Employee Management System version 1.0 **Description** A SQL injection flaw exists in the Endpoint component within the file '/370project/process/eprocess.php'. A remote attacker can exploit this by manipulating the `pwd` argument. **Recommendations** As a temporary workaround, restrict access to the '/370project/process/eprocess.php' file or avoid using the `pwd` parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions code-projects Online Library Management System version 1.0 Description A vulnerability exists in code-projects Online Library Management System 1.0 that may lead to information disclosure. The issue is related to a manipulation of an unknown function within the `/sql/library.sql` file of the SQL Database Backup File Handler component. The attack can be initiated remotely and the exploit has been made public. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Easy Blog Site versions prior to 1.0 Description A weakness exists in Easy Blog Site up to version 1.0. The issue is related to a SQL injection vulnerability in an unknown function within the `/users/contact us.php` file. Manipulating the `Name` argument can trigger the injection. The attack can be launched remotely and the exploit is publicly available. Recommendations Update Easy Blog Site to a version later than 1.0.

Name of the Vulnerable Software and Affected Versions Code-projects Online Hotel Booking version 1.0 Description A cross-site scripting issue exists in the Booking Endpoint component of Code-projects Online Hotel Booking version 1.0. Manipulation of the `roomname` argument in the `/booknow.php` file can lead to cross-site scripting. The attack can be launched remotely and the exploit is publicly available. Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the `roomname` input to prevent the injection of malicious scripts.

Name of the Vulnerable Software and Affected Versions code-projects Online FIR System version 1.0 Description A vulnerability exists in code-projects Online FIR System 1.0 related to insecure storage of sensitive information. The issue is associated with an unknown functionality within the `/complaints.sql` file of the SQL Database Backup File Handler component. This manipulation can be performed remotely and the exploit is publicly available. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Online FIR System version 1.0 **Description** A remote SQL injection exists in the Login component within the '/Login/checklogin.php' endpoint. The issue occurs when manipulating the `email` and `password` arguments, allowing an attacker to interfere with the database queries. **Recommendations** Update code-projects Online FIR System version 1.0 to a patched version. As a temporary workaround, restrict access to the '/Login/checklogin.php' endpoint to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions code-projects Online Application System for Admission version 1.0 Description A vulnerability exists in code-projects Online Application System for Admission 1.0, specifically involving an unknown function within the `/enrollment/database/oas.sql` file. This allows for insecure storage of sensitive information through manipulation. The attack can be carried out remotely, and the exploit has been made public. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions code-projects Online Application System for Admission version 1.0 Description A SQL injection issue exists due to unknown processing of the file `/enrollment/admsnform.php` of the Endpoint component. This manipulation can be executed remotely. The exploit has been disclosed to the public. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions code-projects BloodBank Managing System version 1.0 Description A security issue exists in code-projects BloodBank Managing System 1.0. The issue affects an unknown part of the file `/admin state.php`. Manipulation of the `statename` argument can lead to cross-site scripting. The attack can be initiated remotely, and the exploit has been publicly disclosed. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Simple Food Ordering System version 1.0 **Description** A SQL injection issue exists in the Simple Food Ordering System. The issue is located in the `all-tickets.php` file, specifically through manipulation of the `Status` argument. This allows for remote attacks. The exploit is publicly available. **Recommendations** Simple Food Ordering System version 1.0: Address the SQL injection issue in the `all-tickets.php` file by sanitizing the `Status` argument to prevent malicious code execution.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Food Ordering System version 1.0 **Description** A security issue exists in code-projects Simple Food Ordering System version 1.0, specifically within the Database Backup Handler component and the `/food/sql/food.sql` file. The issue allows for remote access to files and directories. The exploit has been publicly disclosed. **Recommendations** Change the configuration settings.

**Name of the Vulnerable Software and Affected Versions** Tecnick TCExam version 16.5.0 **Description** A security issue exists in Tecnick TCExam. The problem is located in an unknown function within the file `/admin/code/tce edit group.php` of the Group Handler component. Manipulating the `Name` argument can lead to cross site scripting. The attack can be initiated remotely. The exploit is publicly available. **Recommendations** Upgrade the affected component to a later release where this issue is addressed.

**Name of the Vulnerable Software and Affected Versions** Worksuite HR, CRM and Project Management versions up to 5.5.25 **Description** A security issue exists in Worksuite HR, CRM and Project Management. The issue involves cross site scripting, triggered by manipulating the `Client Note` argument within an unknown function of the file '/account/orders/create'. This attack can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** Versions prior to 5.5.25 should be updated. As a temporary workaround, consider restricting or disabling access to the file '/account/orders/create' until a patch is available.