477
CVEs
16
Critical
8
High
0
KEV
451
PoC
24
Unpatched C/H
0.2%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
16
HIGH
8
MEDIUM
305
LOW
148
Monthly CVE Trend
Affected Products (30)
PHP
426
Simple Online Hotel Reservation System
18
Online Music Site
18
Client Details System
16
Real Estate Property Management System
16
Online Hotel Reservation System
16
Simple Food Ordering System
14
Blood Bank Management System
14
E Commerce Website
13
Online Product Reservation System
13
Student File Management System
13
Online Bidding System
13
Online Reviewer System
12
Online Class And Exam Scheduling System
12
Refugee Food Management System
12
Responsive Hotel Site
11
Voting System
10
Online Ordering System
10
Chat System
10
Hostel Management System
9
Hospital Management System
9
School Fees Payment System
9
Student Information System
8
Payroll Management System
8
Simple Forum
8
Simple Scheduling System
7
Simple Car Rental System
7
Nero Social Networking Site
7
Simple Shopping Cart
6
Simple Grading System
6
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-70152 | SQL injection in code-projects Community Project Scholars Tracking System 1.0 admin user management. Allows database compromise via admin panel. PoC available. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
No patch
|
| CVE-2025-69565 | Mobile Shop Management System has file upload enabling web shell deployment. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
No patch
|
| CVE-2025-69562 | Mobile Shop Management System has SQL injection in insertmessage.php. | CRITICAL | 9.8 | 0.0% | 69 |
PoC
No patch
|
| CVE-2025-69563 | Mobile Shop Management System has SQL injection in ExLogin.php. | CRITICAL | 9.8 | 0.0% | 69 |
PoC
No patch
|
| CVE-2025-69564 | Mobile Shop Management System has code injection in ExAddNewUser.php. | CRITICAL | 9.8 | 0.0% | 69 |
PoC
No patch
|
| CVE-2022-2706 | A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2022-2707 | A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2023-7097 | A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2023-7111 | A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2023-7127 | A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.7% | 69 |
PoC
No patch
|
| CVE-2023-7139 | A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2023-7140 | A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2023-7141 | A vulnerability was found in code-projects Client Details System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2023-7142 | A vulnerability was found in code-projects Client Details System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.6% | 69 |
PoC
No patch
|
| CVE-2025-70151 | Scholars Tracking System versions up to 1.0 is affected by unrestricted upload of file with dangerous type (CVSS 8.8). | HIGH | 8.8 | 0.3% | 64 |
PoC
No patch
|