Skip to content

Code-Projects · weakness class

File and Path Handling

77 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 77 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Simple Art Gallery adminHome.php sliderPicSubmit unrestricted uploadCVE-2023-1415Code-Projects · CVSS 6.3 · 1.0% likely

    CWE-434

  2. codeprojects Online Driving School registration.php unrestricted uploadCVE-2022-3129codeprojects · CVSS 6.3 · 1.0% likely

    CWE-434

  3. code-projects Agro-School Management System Attachment Image btn_functions.php unrestricted uploadCVE-2023-3061code-projects · CVSS 6.3 · 0.9% likely

    CWE-434

  4. code-projects Supplier Management System Picture btn_functions.php unrestricted uploadCVE-2023-3274code-projects · CVSS 6.3 · 0.9% likely

    CWE-434

  5. code-projects Admission Management System student_avatar.php unrestricted uploadCVE-2023-5829code-projects · CVSS 6.3 · 0.9% likely

    CWE-434

  6. An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploa…CVE-2023-41506Code-Projects · CVSS 9.8 · 0.9% likely

    CWE-434

  7. code-projects Online Notice Board Profile Picture registration.php unrestricted uploadCVE-2024-12233code-projects · CVSS 7.3 · 0.8% likely

    CWE-434

  8. code-projects Car Rental add-vehicle.php unrestricted uploadCVE-2024-3369code-projects · CVSS 6.3 · 0.8% likely

    CWE-434

  9. An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a c…CVE-2023-41505Code-Projects · CVSS 9.8 · 0.8% likely

    CWE-434

  10. code-projects Simple Online Hotel Reservation System add_room.php unrestricted uploadCVE-2023-1561code-projects · CVSS 6.3 · 0.8% likely

    CWE-434

  11. code-projects Employee Profile Management System download.php path traversalCVE-2024-0465code-projects · CVSS 3.5 · 0.7% likely

    CWE-24

  12. code-projects Simple Photo Gallery unrestricted uploadCVE-2023-2776code-projects · CVSS 6.3 · 0.7% likely

    CWE-434

  13. codeprojects Pharmacy Management System Avatar Image add.php unrestricted uploadCVE-2023-0918codeprojects · CVSS 6.3 · 0.7% likely

    CWE-434

  14. code-projects Exam Form Submission register.php unrestricted uploadCVE-2025-8255code-projects · CVSS 7.3 · 0.7% likely

    CWE-434

  15. code-projects Church Donation System admin_pic.php unrestricted uploadCVE-2025-7931code-projects · CVSS 7.3 · 0.6% likely

    CWE-434

  16. code-projects Document Management System dell.php unlink path traversalCVE-2025-8433code-projects · CVSS 5.4 · 0.6% likely

    CWE-22

  17. code-projects Fighting Cock Information System new-father.php unrestricted uploadCVE-2024-0468code-projects · CVSS 6.3 · 0.6% likely

    CWE-434

  18. code-projects Content Management System Publish News Page publishnews.php unrestricted uploadCVE-2025-0346code-projects · CVSS 4.7 · 0.6% likely

    CWE-434

  19. code-projects Simple Forum forum_downloadfile.php path traversalCVE-2025-6866code-projects · CVSS 4.3 · 0.6% likely

    CWE-22

  20. code-projects Online Bike Rental System Change Image unrestricted uploadCVE-2025-0335code-projects · CVSS 6.3 · 0.6% likely

    CWE-434

  21. code-projects Simple Photo Gallery upload-photo.php unrestricted uploadCVE-2025-6843code-projects · CVSS 7.3 · 0.6% likely

    CWE-434

  22. codeprojects News Publishing Site Dashboard Edit Category Page edit-category.php unrestricted uploadCVE-2025-3969codeprojects · CVSS 6.3 · 0.5% likely

    CWE-434

  23. code-projects College Management System student.php unrestricted uploadCVE-2025-2973code-projects · CVSS 6.3 · 0.5% likely

    CWE-434

  24. code-projects Login Registration System SQL Database Backup login_registration_system.sql file accessCVE-2026-76799code-projects · CVSS 5.3 · 0.5% likely

    CWE-552

  25. code-projects Simple Food Ordering System addproduct.php unrestricted uploadCVE-2025-12378code-projects · CVSS 7.3 · 0.5% likely

    CWE-434

  26. code-projects Simple Food Ordering System editproduct.php unrestricted uploadCVE-2025-12301code-projects · CVSS 7.3 · 0.5% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in