https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15410.htmlhttps://patchthecve.com/cve/CVE-2025-15410.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument L_email leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available andhttps://patchthecve.com/cve/CVE-2025-15409.htmlhttps://patchthecve.com/cve/CVE-2025-15409.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability was determined in code-projects Online Guitar Store 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/Delete_product.php. Executing a manipulation of the argument del_pro can lead to sql injection. The attack may be performed from remote. The exploit https://patchthecve.com/cve/CVE-2025-15408.htmlhttps://patchthecve.com/cve/CVE-2025-15408.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Create_product.php. Performing a manipulation of the argument dre_title results in sql injection. The attack is possible to be carried out remotely. The exploit has been made publichttps://patchthecve.com/cve/CVE-2025-15407.htmlhttps://patchthecve.com/cve/CVE-2025-15407.htmlWed, 07 Oct 2026 11:10:00 +0000HIGH 7.3: A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Create_category.php. Such manipulation of the argument dre_Ctitle leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public andhttps://patchthecve.com/cve/CVE-2025-15049.htmlhttps://patchthecve.com/cve/CVE-2025-15049.htmlMon, 19 Oct 2026 22:10:00 +0000HIGH 7.3: A vulnerability was identified in code-projects Online Farm System 1.0. Affected is an unknown function of the file /addProduct.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2025-14939.htmlhttps://patchthecve.com/cve/CVE-2025-14939.htmlWed, 17 Jun 2026 08:36:48 +0000MEDIUM 4.7: A vulnerability was found in code-projects Online Appointment Booking System 1.0. Impacted is an unknown function of the file /admin/deletemanager.php. The manipulation of the argument managername results in sql injection. The attack may be performed from remote. The exploit has been made public andhttps://patchthecve.com/cve/CVE-2025-14833.htmlhttps://patchthecve.com/cve/CVE-2025-14833.htmlWed, 17 Jun 2026 08:36:37 +0000HIGH 7.3: A security flaw has been discovered in code-projects Online Appointment Booking System 1.0. The impacted element is an unknown function of the file /admin/deletemanagerclinic.php. Performing manipulation of the argument clinic results in sql injection. The attack can be initiated remotely. The explohttps://patchthecve.com/cve/CVE-2025-60736.htmlhttps://patchthecve.com/cve/CVE-2025-60736.htmlWed, 17 Jun 2026 09:50:04 +0000CRITICAL 9.8: code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter.https://patchthecve.com/cve/CVE-2025-13582.htmlhttps://patchthecve.com/cve/CVE-2025-13582.htmlThu, 08 Oct 2026 10:10:00 +0000HIGH 7.3: A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Affected by this issue is some unknown functionality of the file /detail.php of the component GET Parameter Handler. Performing manipulation of the argument Product results in sql injection. Remote exploitation of the attack is https://patchthecve.com/cve/CVE-2025-9028.htmlhttps://patchthecve.com/cve/CVE-2025-9028.htmlWed, 17 Jun 2026 10:08:11 +0000HIGH 7.3: A flaw has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /adphar.php. Executing manipulation of the argument phuname can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.https://patchthecve.com/cve/CVE-2025-9027.htmlhttps://patchthecve.com/cve/CVE-2025-9027.htmlWed, 17 Jun 2026 10:08:11 +0000HIGH 7.3: A vulnerability has been found in code-projects Online Medicine Guide 1.0. This vulnerability affects unknown code of the file /addelivery.php. The manipulation of the argument deName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may bhttps://patchthecve.com/cve/CVE-2025-8990.htmlhttps://patchthecve.com/cve/CVE-2025-8990.htmlWed, 17 Jun 2026 10:08:06 +0000HIGH 7.3: A vulnerability was determined in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /browsemdcn.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may bhttps://patchthecve.com/cve/CVE-2025-8923.htmlhttps://patchthecve.com/cve/CVE-2025-8923.htmlWed, 17 Jun 2026 10:07:55 +0000HIGH 7.3: A vulnerability was determined in code-projects Job Diary 1.0. This vulnerability affects unknown code of the file /edit-details.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2025-8922.htmlhttps://patchthecve.com/cve/CVE-2025-8922.htmlWed, 17 Jun 2026 10:07:55 +0000HIGH 7.3: A vulnerability was found in code-projects Job Diary 1.0. This affects an unknown part of the file /admin-inbox.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2025-8921.htmlhttps://patchthecve.com/cve/CVE-2025-8921.htmlWed, 17 Jun 2026 10:07:55 +0000HIGH 7.3: A vulnerability has been found in code-projects Job Diary 1.0. Affected by this issue is some unknown functionality of the file /user-apply.php. The manipulation of the argument job_title leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and mahttps://patchthecve.com/cve/CVE-2025-8809.htmlhttps://patchthecve.com/cve/CVE-2025-8809.htmlWed, 17 Jun 2026 10:07:40 +0000HIGH 7.3: A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /addelidetails.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2025-8468.htmlhttps://patchthecve.com/cve/CVE-2025-8468.htmlWed, 17 Jun 2026 10:07:02 +0000HIGH 7.3: A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /controllers/reset.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has behttps://patchthecve.com/cve/CVE-2025-8467.htmlhttps://patchthecve.com/cve/CVE-2025-8467.htmlWed, 17 Jun 2026 10:07:02 +0000HIGH 7.3: A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. Thttps://patchthecve.com/cve/CVE-2025-8466.htmlhttps://patchthecve.com/cve/CVE-2025-8466.htmlWed, 17 Jun 2026 10:07:02 +0000HIGH 7.3: A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /forgot_passfarmer.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has beenhttps://patchthecve.com/cve/CVE-2025-8443.htmlhttps://patchthecve.com/cve/CVE-2025-8443.htmlWed, 17 Jun 2026 10:06:59 +0000HIGH 7.3: A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack may be launched remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2025-8442.htmlhttps://patchthecve.com/cve/CVE-2025-8442.htmlWed, 17 Jun 2026 10:06:59 +0000HIGH 7.3: A vulnerability has been found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /cussignup.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploithttps://patchthecve.com/cve/CVE-2025-8441.htmlhttps://patchthecve.com/cve/CVE-2025-8441.htmlWed, 17 Jun 2026 10:06:59 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /pharsignup.php. The manipulation of the argument phuname leads to sql injection. It is possible to launch the attack remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-8439.htmlhttps://patchthecve.com/cve/CVE-2025-8439.htmlWed, 17 Jun 2026 10:06:59 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in code-projects Wazifa System 1.0. This issue affects some unknown processing of the file /controllers/updatesettings.php. The manipulation of the argument Password leads to sql injection. The attack may be initiated remotely. The exhttps://patchthecve.com/cve/CVE-2025-8438.htmlhttps://patchthecve.com/cve/CVE-2025-8438.htmlWed, 17 Jun 2026 10:06:59 +0000HIGH 7.3: A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown code of the file /controllers/postpublish.php. The manipulation of the argument post leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2025-8437.htmlhttps://patchthecve.com/cve/CVE-2025-8437.htmlWed, 17 Jun 2026 10:06:59 +0000HIGH 7.3: A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed thttps://patchthecve.com/cve/CVE-2025-8435.htmlhttps://patchthecve.com/cve/CVE-2025-8435.htmlWed, 17 Jun 2026 10:06:58 +0000HIGH 7.3: A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-control.php. The manipulation of the argument ID leads to missing authorization. The attack can be launched remotely.https://patchthecve.com/cve/CVE-2025-8434.htmlhttps://patchthecve.com/cve/CVE-2025-8434.htmlWed, 17 Jun 2026 10:06:58 +0000HIGH 7.3: A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been classified as critical. Affected is an unknown function of the file /admin.php. The manipulation of the argument ID leads to missing authorization. It is possible to launch the attack remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-8333.htmlhttps://patchthecve.com/cve/CVE-2025-8333.htmlWed, 17 Jun 2026 10:06:46 +0000HIGH 7.3: A vulnerability was found in code-projects Online Farm System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /categoryvalue.php. The manipulation of the argument Value leads to sql injection. The attack can be launched remotely. The explhttps://patchthecve.com/cve/CVE-2025-8332.htmlhttps://patchthecve.com/cve/CVE-2025-8332.htmlWed, 17 Jun 2026 10:06:46 +0000HIGH 7.3: A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2025-8331.htmlhttps://patchthecve.com/cve/CVE-2025-8331.htmlWed, 17 Jun 2026 10:06:45 +0000HIGH 7.3: A vulnerability was found in code-projects Online Farm System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot_pass.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed thttps://patchthecve.com/cve/CVE-2025-7765.htmlhttps://patchthecve.com/cve/CVE-2025-7765.htmlWed, 17 Jun 2026 10:05:36 +0000HIGH 7.3: A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/addmanagerclinic.php. The manipulation of the argument clinic leads to sql injection. The attack can be launched remohttps://patchthecve.com/cve/CVE-2025-7764.htmlhttps://patchthecve.com/cve/CVE-2025-7764.htmlWed, 17 Jun 2026 10:05:36 +0000HIGH 7.3: A vulnerability classified as critical has been found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/deletedoctorclinic.php. The manipulation of the argument clinic leads to sql injection. It is possible to launch the attack remotely. The ehttps://patchthecve.com/cve/CVE-2025-7753.htmlhttps://patchthecve.com/cve/CVE-2025-7753.htmlWed, 17 Jun 2026 10:05:35 +0000HIGH 7.3: A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adddoctor.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The ehttps://patchthecve.com/cve/CVE-2025-7752.htmlhttps://patchthecve.com/cve/CVE-2025-7752.htmlWed, 17 Jun 2026 10:05:35 +0000HIGH 7.3: A vulnerability was found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/deletedoctor.php. The manipulation of the argument did leads to sql injection. The attack may be launched remotely. Thehttps://patchthecve.com/cve/CVE-2025-7751.htmlhttps://patchthecve.com/cve/CVE-2025-7751.htmlWed, 17 Jun 2026 10:05:35 +0000HIGH 7.3: A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addclinic.php. The manipulation of the argument cid leads to sql injection. The attack can be launched remothttps://patchthecve.com/cve/CVE-2025-7750.htmlhttps://patchthecve.com/cve/CVE-2025-7750.htmlWed, 17 Jun 2026 10:05:34 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /admin/adddoctorclinic.php. The manipulation of the argument clinic leads to sql injection. It is possible to launch the attack remotely. Thttps://patchthecve.com/cve/CVE-2025-7749.htmlhttps://patchthecve.com/cve/CVE-2025-7749.htmlWed, 17 Jun 2026 10:05:34 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /admin/getmanagerregion.php. The manipulation of the argument city leads to sql injection. The attack may be initiated remohttps://patchthecve.com/cve/CVE-2025-7612.htmlhttps://patchthecve.com/cve/CVE-2025-7612.htmlWed, 17 Jun 2026 10:05:20 +0000HIGH 7.3: A vulnerability was found in code-projects Mobile Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the pubhttps://patchthecve.com/cve/CVE-2025-7611.htmlhttps://patchthecve.com/cve/CVE-2025-7611.htmlWed, 17 Jun 2026 10:05:20 +0000HIGH 7.3: A vulnerability was found in code-projects Wedding Reservation 1.0. It has been classified as critical. This affects an unknown part of the file /global.php. The manipulation of the argument lu leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to https://patchthecve.com/cve/CVE-2025-7610.htmlhttps://patchthecve.com/cve/CVE-2025-7610.htmlWed, 17 Jun 2026 10:05:20 +0000HIGH 7.3: A vulnerability was found in code-projects Electricity Billing System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/change_password.php. The manipulation of the argument new_password leads to sql injection. The attack may be launched remotely.https://patchthecve.com/cve/CVE-2025-7606.htmlhttps://patchthecve.com/cve/CVE-2025-7606.htmlWed, 17 Jun 2026 10:05:20 +0000HIGH 7.3: A vulnerability classified as critical has been found in code-projects AVL Rooms 1.0. This affects an unknown part of the file /city.php. The manipulation of the argument city leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and mayhttps://patchthecve.com/cve/CVE-2025-7605.htmlhttps://patchthecve.com/cve/CVE-2025-7605.htmlWed, 17 Jun 2026 10:05:19 +0000HIGH 7.3: A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument first_name leads to sql injection. The attack may be launched remotely. The exploit has been disclohttps://patchthecve.com/cve/CVE-2025-7595.htmlhttps://patchthecve.com/cve/CVE-2025-7595.htmlWed, 17 Jun 2026 10:05:18 +0000HIGH 7.3: A vulnerability was found in code-projects Job Diary 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view-cad.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publihttps://patchthecve.com/cve/CVE-2025-7594.htmlhttps://patchthecve.com/cve/CVE-2025-7594.htmlWed, 17 Jun 2026 10:05:18 +0000HIGH 7.3: A vulnerability was found in code-projects Job Diary 1.0. It has been classified as critical. This affects an unknown part of the file /view-emp.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the publhttps://patchthecve.com/cve/CVE-2025-7593.htmlhttps://patchthecve.com/cve/CVE-2025-7593.htmlWed, 17 Jun 2026 10:05:18 +0000HIGH 7.3: A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-all.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the https://patchthecve.com/cve/CVE-2025-7587.htmlhttps://patchthecve.com/cve/CVE-2025-7587.htmlWed, 17 Jun 2026 10:05:17 +0000HIGH 7.3: A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cover.php. The manipulation of the argument uname/psw leads to sql injection. The attack may be launched remotely. The exhttps://patchthecve.com/cve/CVE-2025-7541.htmlhttps://patchthecve.com/cve/CVE-2025-7541.htmlWed, 17 Jun 2026 10:05:10 +0000HIGH 7.3: A vulnerability has been found in code-projects Online Appointment Booking System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /get_town.php. The manipulation of the argument countryid leads to sql injection. The attack can be launched remotehttps://patchthecve.com/cve/CVE-2025-7540.htmlhttps://patchthecve.com/cve/CVE-2025-7540.htmlWed, 17 Jun 2026 10:05:10 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in code-projects Online Appointment Booking System 1.0. Affected is an unknown function of the file /getclinic.php. The manipulation of the argument townid leads to sql injection. It is possible to launch the attack remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-7539.htmlhttps://patchthecve.com/cve/CVE-2025-7539.htmlWed, 17 Jun 2026 10:05:10 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in code-projects Online Appointment Booking System 1.0. This issue affects some unknown processing of the file /getdoctordaybooking.php. The manipulation of the argument cid leads to sql injection. The attack may be initiated remotelyhttps://patchthecve.com/cve/CVE-2025-7533.htmlhttps://patchthecve.com/cve/CVE-2025-7533.htmlWed, 17 Jun 2026 10:05:09 +0000HIGH 7.3: A vulnerability was found in code-projects Job Diary 1.0 and classified as critical. This issue affects some unknown processing of the file /view-details.php. The manipulation of the argument job_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the p