Vendor
Code-Projects vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 146 vulnerabilities in Code-Projects: 0 in the last 7 days and 41 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-116623, was published on 27 October 2026. 5 vulnerabilities in the last four weeks, down 17% on the four before (6). 19 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 41
- Critical, all time
- 2
- Exploited in the wild
- 0
About Code-Projects
Code-projects is an organization that provides open-source web and mobile application source code for educational purposes.
Code-Projects technologies
- Code-Projects Employee Management System11
- Code-Projects Simple Laundry System11
- Code-Projects Hotel and Tourism Reservation System10
- Code-Projects Real State Services9
- Code-Projects Hospital Information System5
- Code-Projects Internship Management System5
- Code-Projects Online Music Site5
- Code-Projects Simple IT Discussion Forum5
- Code-Projects Assessment Management System4
- Code-Projects Matrimonial System4
- Code-Projects Online Hospital Management System4
- Code-Projects Online Job Portal4
- Code-Projects Online Shopping System4
- Code-Projects Simple Inventory System4
- Code-Projects Assessment Management3
- Code-Projects Barangay Resident Profiling Management System3
- Code-Projects Library System3
- Code-Projects Online-Shoe-Store3
- Code-Projects Vehicle Management System3
Latest Code-Projects vulnerabilities
- CVE-2026-116623: code-projects Simple Content Management System authorization bypass in admin interfacehighCVSS 7.3
- CVE-2026-108956: code-projects Online Reviewer System SQL injection in user updatehighCVSS 7.3EPSS 0.3%
- CVE-2026-108948: code-projects Online Reviewer System privilege escalation via mass assignmentmediumCVSS 5.4EPSS 0.3%
- CVE-2026-108938: code-projects Matrimonial System hardcoded credentials exposuremediumCVSS 5.3EPSS 0.3%
- CVE-2026-108937: code-projects Online Ticket Reservation System credential exposure in SQL filemediumCVSS 5.3EPSS 0.3%
- CVE-2026-101105: code-projects Matrimonial System SQL injection in profile creationmediumCVSS 6.3
- CVE-2026-93980: code-projects Internship Management System SQL injection in admin loginhighCVSS 7.3EPSS 0.4%
- CVE-2026-93979: code-projects Internship Management System SQL injection in loginhighCVSS 7.3EPSS 0.4%
- CVE-2026-93978: code-projects Internship Management System SQL injection in loginhighCVSS 7.3EPSS 0.4%
- CVE-2026-92926: Code Projects Matrimonial System SQL injection in partner preferenceshighCVSS 7.3EPSS 0.4%
- CVE-2026-92366: code-projects Matrimonial System SQL injection in searchhighCVSS 7.3EPSS 0.6%
- CVE-2026-86519: code-projects Student Crud Operation information disclosure in backup filemediumCVSS 5.3EPSS 0.5%
- CVE-2026-86518: code-projects Student Crud Operation SQL injection in edit.phpmediumCVSS 6.3EPSS 0.3%
- CVE-2026-86302: code-projects Hospital Information System information disclosure via SQL backupmediumCVSS 5.3EPSS 0.5%
- CVE-2026-86301: code-projects Hospital Information System reflected XSS in patient ID parameterlowCVSS 3.5EPSS 0.4%
- CVE-2026-86217: code-projects Hotel and Tourism Reservation information disclosure via exposed SQL filemediumCVSS 5.3EPSS 0.5%
- CVE-2026-86216: code-projects Hotel and Tourism Reservation reflected XSS in room parametermediumCVSS 4.3EPSS 0.5%
- CVE-2026-86181: code-projects Task Management System stored cross-site scripting in user profile updatelowCVSS 3.5EPSS 0.4%
- CVE-2026-86180: code-projects Task Management System SQL injection in email parameterhighCVSS 7.3EPSS 0.4%
- CVE-2026-86179: code-projects Daily Expense Manager information disclosure in database backup handlermediumCVSS 5.3EPSS 0.5%
- CVE-2026-85643: code-projects Online Shopping System SQL injection in admin addusermediumCVSS 4.7EPSS 0.4%
- CVE-2026-85517: code-projects Vehicle Management System information disclosure via exposed SQL database filemediumCVSS 5.3EPSS 0.5%
- CVE-2026-85516: code-projects Vehicle Management System SQL injection in busid parameterhighCVSS 7.3EPSS 0.4%
- CVE-2026-85399: code-projects Hospital Information System SQL injectionhighCVSS 7.3EPSS 0.4%
- CVE-2026-85398: code-projects Hospital Information System SQL injection in ReqControllerhighCVSS 7.3EPSS 0.4%
Most severe Code-Projects vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-60306: code-projects Simple Car Rental System session forgery privilege escalationcriticalCVSS 9.9EPSS 0.4%
- CVE-2025-70152: code-projects Community Project Scholars Tracking System SQL injection in user managementcriticalCVSS 9.8EPSS 0.4%
- CVE-2026-92366: code-projects Matrimonial System SQL injection in searchhighCVSS 7.3EPSS 0.6%
- CVE-2026-0546: A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the…highCVSS 7.3EPSS 0.4%
- CVE-2026-93980: code-projects Internship Management System SQL injection in admin loginhighCVSS 7.3EPSS 0.4%
- CVE-2026-93979: code-projects Internship Management System SQL injection in loginhighCVSS 7.3EPSS 0.4%
- CVE-2026-93978: code-projects Internship Management System SQL injection in loginhighCVSS 7.3EPSS 0.4%
- CVE-2026-92926: Code Projects Matrimonial System SQL injection in partner preferenceshighCVSS 7.3EPSS 0.4%
- CVE-2026-86180: code-projects Task Management System SQL injection in email parameterhighCVSS 7.3EPSS 0.4%
- CVE-2026-85516: code-projects Vehicle Management System SQL injection in busid parameterhighCVSS 7.3EPSS 0.4%
Vulnerabilities per week
5 vulnerabilities in the last four weeks, down 17% on the four before (6). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 7 | 0 | |
| 24 Aug 2026 | 2 | 0 | |
| 31 Aug 2026 | 16 | 0 | |
| 7 Sep 2026 | 4 | 0 | |
| 14 Sep 2026 | 5 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 1 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 4 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 1 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Code-Projects vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/code-projects)<a href="https://junglewise.ai/threats/vendors/code-projects"><img src="https://junglewise.ai/threats/vendors/code-projects/badge.svg" alt="Code-Projects vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/code-projects.json, and this page as text at https://junglewise.ai/threats/vendors/code-projects.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Code-Projects vulnerabilities", https://junglewise.ai/threats/vendors/code-projects, 12 November 2026.