Skip to content

Codezips · weakness class

File and Path Handling

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted uploadCVE-2024-11661Codezips · CVSS 4.3 · 0.8% likely

    CWE-434

  2. Codezips Online Institute Management System manage_website.php unrestricted uploadCVE-2024-10993Codezips · CVSS 6.3 · 0.7% likely

    CWE-434

  3. Codezips Online Shopping Portal insert-product.php unrestricted uploadCVE-2024-9038Codezips · CVSS 4.3 · 0.7% likely

    CWE-434

  4. Codezips E-Commerce Site addproduct.php unrestricted uploadCVE-2024-4923Codezips · CVSS 6.3 · 0.7% likely

    CWE-434

  5. Codezips E-Commerce Site editproduct.php unrestricted uploadCVE-2024-5049Codezips · CVSS 6.3 · 0.7% likely

    CWE-434

  6. Codezips Online Institute Management System edit_user.php unrestricted uploadCVE-2024-10994Codezips · CVSS 6.3 · 0.7% likely

    CWE-434

  7. Codezips Online Shopping Portal update-image1.php unrestricted uploadCVE-2024-9794Codezips · CVSS 6.3 · 0.7% likely

    CWE-434

  8. Codezips Tourist Management System change-image.php unrestricted uploadCVE-2024-9816Codezips · CVSS 4.7 · 0.6% likely

    CWE-434

  9. Codezips Tourist Management System create-package.php unrestricted uploadCVE-2024-9815Codezips · CVSS 4.7 · 0.6% likely

    CWE-434

  10. Codezips Free Exam Hall Seating Management System save_user.php unrestricted uploadCVE-2024-10766Codezips · CVSS 6.3 · 0.5% likely

    CWE-434

  11. Codezips Online Institute Management System profile.php unrestricted uploadCVE-2024-10765Codezips · CVSS 6.3 · 0.5% likely

    CWE-434

  12. Codezips Online Institute Management System save_user.php unrestricted uploadCVE-2024-10764Codezips · CVSS 6.3 · 0.5% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in