Fabian Security Vulnerabilities (CVEs)

This SQL injection vulnerability in code-projects E-Commerce Website 1.0 allows attackers to manipulate database queries through the prod_id parameter...

This SQL injection vulnerability in Project Monitoring System 1.0 allows attackers to execute arbitrary SQL commands through the login form. Attackers...

This vulnerability allows remote attackers to execute SQL injection attacks against SourceCodester Online Hotel Reservation System 1.0 via the 'addres...

This SQL injection vulnerability in code-projects E-Commerce Website 1.0 allows remote attackers to execute arbitrary SQL commands via the user_id par...

CVE-2025-10843 is an SQL injection vulnerability in Reservation Online Hotel Reservation System 1.0 that allows remote attackers to execute arbitrary ...

This SQL injection vulnerability in code-projects Online Bidding System 1.0 allows attackers to manipulate database queries through the ID parameter i...

CVE-2025-10802 is an SQL injection vulnerability in code-projects Online Bidding System 1.0 that allows remote attackers to execute arbitrary SQL comm...

CVE-2025-10795 is an SQL injection vulnerability in code-projects Online Bidding System 1.0 that allows remote attackers to execute arbitrary SQL comm...

CVE-2025-10791 is a SQL injection vulnerability in code-projects Online Bidding System 1.0 that allows remote attackers to execute arbitrary SQL comma...

This vulnerability allows remote attackers to execute SQL injection attacks on SourceCodester Online Hotel Reservation System 1.0 via the deleteroomin...

This CVE describes a Cross-Site Scripting (XSS) vulnerability in code-projects Document Management System 1.0 where attackers can inject malicious Jav...

This vulnerability allows attackers to inject malicious scripts into the Child's Name field in code-projects Human Resource Integrated System 1.0. Whe...

This vulnerability allows remote attackers to upload arbitrary files to Mobile Shop Management System 1.0 servers via the ProductImage parameter in Ad...

This CVE describes a SQL injection vulnerability in SourceCodester Online Hotel Reservation System 1.0, specifically in the /admin/edituser.php file's...

CVE-2025-9733 is a SQL injection vulnerability in code-projects Human Resource Integrated System 1.0 affecting the /login_timeee.php file via the emp_...

CVE-2025-9665 is an SQL injection vulnerability in Simple Grading System 1.0 that allows attackers to manipulate database queries through the /edit_st...

CVE-2025-9664 is an SQL injection vulnerability in Simple Grading System 1.0's admin panel that allows attackers to manipulate database queries throug...

CVE-2025-9662 is an SQL injection vulnerability in Simple Grading System 1.0's admin panel login.php file. Attackers can execute arbitrary SQL command...

This vulnerability allows remote attackers to execute SQL injection attacks against Simple Cafe Ordering System 1.0 through the /portal.php file. Atta...

CVE-2025-8964 is an improper authentication vulnerability in code-projects Hostel Management System 1.0 that allows attackers to bypass login controls...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to execute arbitrary SQL commands via the companyNameTxt para...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to manipulate database queries through the password change fu...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to execute arbitrary SQL commands through the searchTxt param...

This SQL injection vulnerability in Medical Store Management System 1.0 allows attackers to manipulate database queries through the productNameTxt par...

CVE-2025-8859 is an unrestricted file upload vulnerability in eBlog Site 1.0's admin panel. Attackers can upload malicious files to the server via the...

This critical SQL injection vulnerability in Human Resource Integrated System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'c...

A critical SQL injection vulnerability in SourceCodester Online Hotel Reservation System 1.0 allows remote attackers to execute arbitrary SQL commands...

This critical SQL injection vulnerability in code-projects Online Ordering System 1.0 allows remote attackers to execute arbitrary SQL commands via th...

CVE-2025-8236 is a critical SQL injection vulnerability in code-projects Online Ordering System 1.0 that allows remote attackers to execute arbitrary ...

This critical SQL injection vulnerability in code-projects Online Ordering System 1.0 allows attackers to execute arbitrary SQL commands via the ID pa...

A critical SQL injection vulnerability exists in the Online Ordering System 1.0 by code-projects, specifically in the /admin/delete_user.php file's ID...

This critical vulnerability in code-projects Voting System 1.0 allows remote attackers to upload arbitrary files via the photo parameter in /admin/can...

This critical vulnerability in code-projects Document Management System 1.0 allows remote attackers to upload arbitrary files via the /insert.php endp...

CVE-2025-7950 is a critical SQL injection vulnerability in code-projects Public Chat Room 1.0 that allows attackers to execute arbitrary SQL commands ...

A critical SQL injection vulnerability in Simple Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the order_price param...

CVE-2025-7609 is a critical SQL injection vulnerability in Simple Shopping Cart 1.0 that allows remote attackers to execute arbitrary SQL commands via...

This critical SQL injection vulnerability in code-projects Voting System 1.0 allows remote attackers to execute arbitrary SQL commands via the firstna...

This critical SQL injection vulnerability in code-projects Voting System 1.0 allows remote attackers to manipulate database queries through the ID par...

This critical vulnerability in Simple Car Rental System 1.0 allows remote attackers to upload arbitrary files via the image parameter in /admin/add_ca...

A critical SQL injection vulnerability in Simple Car Rental System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'mpesa' param...

A critical SQL injection vulnerability exists in code-projects Chat System 1.0 through the /user/send_message.php file's msg parameter. Attackers can ...

CVE-2025-7187 is a critical SQL injection vulnerability in code-projects Chat System 1.0 that allows remote attackers to execute arbitrary SQL command...

This critical vulnerability in code-projects E-Commerce Site 1.0 allows remote attackers to upload arbitrary files via the photo parameter in /admin/u...

This critical SQL injection vulnerability in Responsive Blog Site 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter i...

CVE-2025-6850 is a critical SQL injection vulnerability in Simple Forum 1.0 that allows remote attackers to execute arbitrary SQL commands via the 'Fi...

A critical SQL injection vulnerability exists in Simple Forum 1.0's /forum_edit.php file, allowing remote attackers to manipulate database queries via...

CVE-2025-6845 is a critical SQL injection vulnerability in Simple Forum 1.0 that allows remote attackers to execute arbitrary SQL commands via the Use...

CVE-2025-6843 is a critical unrestricted file upload vulnerability in Simple Photo Gallery 1.0 that allows remote attackers to upload arbitrary files ...

This SQL injection vulnerability in code-projects Product Inventory System 1.0 allows attackers to manipulate database queries through the ID paramete...

This critical SQL injection vulnerability in code-projects Product Inventory System 1.0 allows remote attackers to execute arbitrary SQL commands thro...