9
CVEs
1
Critical
0
High
0
KEV
8
PoC
1
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
0
MEDIUM
7
LOW
1
Monthly CVE Trend
Affected Products (29)
PHP
139
Job Recruitment
19
Online Appointment Booking System
16
Online Medicine Guide
13
E Health Care System
10
Wazifa System
10
Farmacia
9
Job Diary
8
Car Rental System
6
Online Book System
5
Jonnys Liquor
5
Online Farm System
5
Mobile Shop
4
Online Guitar Store
4
University Event Management System
3
Lifestyle Store
3
Online Movie Streaming
2
Kitchen Treasure
2
Avl Rooms
2
Admission Management System
2
Fantasy Cricket
2
Online Note Sharing
2
Wedding Reservation
1
Concert Ticket Ordering System
1
Car Rental
1
Online Shop
1
Online Hotel Booking
1
Electricity Billing System
1
Supply Chain Management
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-60736 | code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter. | CRITICAL | 9.8 | 0.0% | 69 |
PoC
No patch
|
| CVE-2025-13582 | A security flaw has been discovered in code-projects Jonnys Liquor 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.1% | 48 |
PoC
No patch
|
| CVE-2025-15049 | SQL injection in Online Farm System 1.0 allows remote attackers to manipulate database queries through the Username parameter of the /addProduct.php endpoint. Exploit code is publicly available, although the immediate impact is limited to low confidentiality, integrity, and availability effects according to the CVSS assessment. At the time of analysis no active exploitation has been confirmed by CISA KEV, and EPSS indicates a low probability of widespread exploitation. | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-15407 | A vulnerability has been found in code-projects Online Guitar Store 1.0. This impacts an unknown function of the file /admin/Create_category.php. [CVSS 7.3 HIGH] | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-15408 | A vulnerability was found in code-projects Online Guitar Store 1.0. Affected is an unknown function of the file /admin/Create_product.php. [CVSS 7.3 HIGH] | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-15410 | A vulnerability was identified in code-projects Online Guitar Store 1.0. Affected by this issue is some unknown functionality of the file /login.php. [CVSS 7.3 HIGH] | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-15409 | Online Guitar Store versions up to 1.0 contains a vulnerability that allows attackers to sql injection (CVSS 7.3). | MEDIUM | 5.5 | 0.0% | 48 |
PoC
No patch
|
| CVE-2025-14939 | SQL injection in code-projects Online Appointment Booking System 1.0 allows high-privilege remote attackers to manipulate the managername parameter in /admin/deletemanager.php, resulting in limited confidentiality and integrity impact. EPSS score of 0.05% and CVSS 2.0 reflect the high privilege requirement (PR:H), which severely constrains real-world exploitability despite public POC availability. | LOW | 2.0 | 0.0% | 30 |
PoC
No patch
|
| CVE-2025-14833 | SQL injection in code-projects Online Appointment Booking System 1.0 allows remote attackers to manipulate the 'clinic' parameter in /admin/deletemanagerclinic.php, leading to unauthorized data access, modification, or deletion. A public exploit is available, though no active exploitation has been confirmed (not in CISA KEV), and EPSS indicates low (0.04%) exploitation probability. | MEDIUM | 5.5 | 0.0% | 28 |
No patch
|