Fabian Security Vulnerabilities (CVEs)

This vulnerability allows remote attackers to upload arbitrary files to the Student File Management System 1.0 via the /save_file.php endpoint. Attack...

This vulnerability allows remote attackers to execute arbitrary SQL commands via the 'a' parameter in /home/home.php in code-projects Refugee Food Man...

This vulnerability allows remote attackers to execute SQL injection attacks against the Scholars Tracking System 1.0 by manipulating the post_content ...

CVE-2025-14950 is an SQL injection vulnerability in code-projects Scholars Tracking System 1.0 that allows attackers to execute arbitrary SQL commands...

This SQL injection vulnerability in Scholars Tracking System 1.0 allows attackers to execute arbitrary SQL commands via the ID parameter in /admin/del...

This vulnerability allows attackers to inject malicious scripts into the Student File Management System's update user page. When exploited, it enables...

This vulnerability allows attackers to inject malicious scripts into the Student File Management System 1.0 through the /admin/update_student.php endp...

This SQL injection vulnerability in code-projects Student File Management System 1.0 allows attackers to execute arbitrary SQL commands via the user_i...

This vulnerability allows remote attackers to execute arbitrary SQL commands via the 'stud_id' parameter in the /admin/delete_student.php file in code...

This SQL injection vulnerability in Simple Attendance Record System 2.0 allows attackers to manipulate database queries through the student parameter ...

This vulnerability allows remote attackers to execute SQL injection attacks against the Student File Management System 1.0 by manipulating the stud_no...

This SQL injection vulnerability in code-projects Student File Management System 1.0 allows attackers to execute arbitrary SQL commands through the fi...

This SQL injection vulnerability in code-projects Student File Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the...

This SQL injection vulnerability in code-projects Student File Management System 1.0 allows attackers to manipulate database queries through the user_...

This vulnerability allows remote attackers to execute SQL injection attacks via the 'stud_no' parameter in the login_query.php file of Student File Ma...

CVE-2025-14620 is an SQL injection vulnerability in code-projects Student File Management System 1.0 that allows attackers to manipulate database quer...

CVE-2025-14537 is a SQL injection vulnerability in code-projects Class and Exam Timetable Management 1.0 that allows attackers to manipulate database ...

CVE-2025-14536 is an SQL injection vulnerability in code-projects Class and Exam Timetable Management 1.0 that allows attackers to execute arbitrary S...

CVE-2025-14250 is a SQL injection vulnerability in code-projects Online Ordering System 1.0 that allows remote attackers to execute arbitrary SQL comm...

CVE-2025-14251 is an SQL injection vulnerability in code-projects Online Ordering System 1.0 that allows attackers to manipulate database queries thro...

CVE-2025-14248 is an SQL injection vulnerability in Simple Shopping Cart 1.0's admin login page that allows attackers to execute arbitrary SQL command...

CVE-2025-14249 is a SQL injection vulnerability in code-projects Online Ordering System 1.0 that allows attackers to manipulate database queries throu...

CVE-2025-14247 is an SQL injection vulnerability in Simple Shopping Cart 1.0's /Admin/additems.php file, allowing remote attackers to manipulate datab...

This SQL injection vulnerability in Simple Shopping Cart 1.0 allows attackers to manipulate database queries through the user_id parameter in /Custome...

CVE-2025-14218 is a SQL injection vulnerability in code-projects Currency Exchange System 1.0 that allows remote attackers to execute arbitrary SQL co...

CVE-2025-14216 is a SQL injection vulnerability in code-projects Currency Exchange System 1.0 that allows remote attackers to execute arbitrary SQL co...

CVE-2025-14217 is a SQL injection vulnerability in code-projects Currency Exchange System 1.0 that allows remote attackers to execute arbitrary SQL co...

This SQL injection vulnerability in Currency Exchange System 1.0 allows attackers to execute arbitrary SQL commands through the ID parameter in /edit....

This CVE describes a cross-site scripting (XSS) vulnerability in the Chamber of Commerce Membership Management System 1.0. Attackers can inject malici...

CVE-2025-13576 is an improper authorization vulnerability in code-projects Blog Site 1.0 that allows remote attackers to bypass authentication on the ...

This SQL injection vulnerability in code-projects Blog Site 1.0 allows attackers to manipulate database queries through the category_exists function. ...

This vulnerability allows remote attackers to upload arbitrary files to the Online Bidding System 1.0 administrator interface via the catimage paramet...

This vulnerability allows remote attackers to execute SQL injection attacks against Simple Food Ordering System 1.0 by manipulating the ID parameter i...

This SQL injection vulnerability in Simple Food Ordering System 1.0 allows attackers to manipulate database queries through the /saveorder.php endpoin...

CVE-2025-13279 is an SQL injection vulnerability in Nero Social Networking Site 1.0 that allows remote attackers to execute arbitrary SQL commands via...

CVE-2025-13277 is a SQL injection vulnerability in Nero Social Networking Site 1.0 that allows remote attackers to execute arbitrary SQL commands via ...

This vulnerability allows attackers to inject malicious scripts into the Student Information System 2.0 registration page, which could execute in vict...

This vulnerability allows attackers to inject malicious scripts into the Student Information System 2.0 through the /editprofile.php page. When exploi...

This SQL injection vulnerability in code-projects Student Information System 2.0 allows attackers to execute arbitrary SQL commands through the /editp...

This SQL injection vulnerability in Student Information System 2.0 allows attackers to execute arbitrary SQL commands through the /register.php endpoi...

CVE-2025-13241 is an SQL injection vulnerability in code-projects Student Information System 2.0 that allows remote attackers to execute arbitrary SQL...

CVE-2025-13240 is an SQL injection vulnerability in code-projects Student Information System 2.0 that allows attackers to manipulate database queries ...

This SQL injection vulnerability in Simple Cafe Ordering System 1.0 allows attackers to manipulate database queries through the studentnum parameter i...

CVE-2025-13201 is an SQL injection vulnerability in code-projects Simple Cafe Ordering System 1.0 that allows attackers to execute arbitrary SQL comma...

This CVE describes a path traversal vulnerability in Email Logging Interface 2.0 where manipulation of the Username argument allows attackers to acces...

CVE-2025-13169 is an SQL injection vulnerability in Simple Online Hotel Reservation System 1.0 that allows remote attackers to execute arbitrary SQL c...

CVE-2025-13170 is an SQL injection vulnerability in Simple Online Hotel Reservation System 1.0 that allows attackers to manipulate database queries vi...

This CSRF vulnerability in Simple E-Banking System 1.0 allows attackers to trick authenticated users into performing unintended actions, such as force...

CVE-2025-13075 is an SQL injection vulnerability in Responsive Hotel Site 1.0's admin/usersettingdel.php file that allows attackers to manipulate data...

CVE-2025-13076 is an SQL injection vulnerability in Responsive Hotel Site 1.0 that allows remote attackers to execute arbitrary SQL commands via the '...