Yunlin

**Name of the Vulnerable Software and Affected Versions** code-projects Student Information System version 2.0 **Description** A flaw exists in code-projects Student Information System 2.0, affecting unknown code within the `/index.php` file. Manipulation of the `Username` argument can lead to SQL injection, allowing for remote execution of attacks. The exploit has been published. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Student Information System version 2.0 **Description** A security issue exists in code-projects Student Information System 2.0. The issue involves cross site scripting and impacts an unknown function within the `/editprofile.php` file. This allows for remote attacks. The exploit is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Student Information System version 2.0 **Description** A cross site scripting issue exists in code-projects Student Information System 2.0. The issue is located in the `/register.php` file within an unknown function. This manipulation allows for remote attacks, and the exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Student Information System version 2.0 **Description** A SQL injection issue exists in code-projects Student Information System 2.0. The issue is located in the `/editprofile.php` file, within an unknown function. Remote attackers can exploit this to inject malicious SQL code. The exploit has been publicly released. The vulnerable parameter is not specified. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Student Information System version 2.0 **Description** A flaw exists in code-projects Student Information System version 2.0 related to the processing of the `/register.php` file. This can be exploited remotely to perform SQL injection. The exploit for this issue has been publicly disclosed. The vulnerable parameter is not specified. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Email Logging Interface version 2.0 **Description** A path traversal issue exists due to the manipulation of the `Username` argument in an unknown function within the `signup.cpp` file. This allows for directory traversal using the sequence '../filedir'. Exploitation requires local access. The exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Online Hotel Reservation System version 2.0 **Description** A security flaw exists in code-projects Simple Online Hotel Reservation System 2.0. The issue involves a SQL injection affecting an unknown function within the `/admin/add account.php` file. Manipulation of the `Name` argument can lead to SQL injection, and the attack can be performed remotely. The exploit has been publicly released. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Online Hotel Reservation System version 2.0 **Description** A flaw exists in code-projects Simple Online Hotel Reservation System 2.0 that allows for unrestricted file uploads. This issue is located within the Photo Handler component, specifically in the `/admin/edit room.php` file and an unknown function. The attack can be initiated remotely. An exploit for this issue is publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** code-projects Simple Food Ordering System version 1.0 **Description** A security issue exists in code-projects Simple Food Ordering System 1.0. The vulnerability is related to cross site scripting, triggered by manipulating the `ID` argument in the file '/ordersimple/order.php'. The attack can be initiated remotely, and the exploit has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions:** code-projects Responsive Blog version 1.0 **Description:** A problematic issue exists in code-projects Responsive Blog 1.0. The vulnerability affects an unknown functionality within the `/search.php` file. Manipulation of the `argument` keyword can lead to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. **Recommendations:** code-projects Responsive Blog version 1.0: Sanitize or properly encode the `argument` keyword within the `/search.php` file to prevent cross site scripting.

Name of the Vulnerable Software and Affected Versions: code-projects Automated Voting System version 1.0 Description: A problematic vulnerability has been found in the Automated Voting System. It affects an unknown function of the file /vote.php in the Backend component. The manipulation leads to a direct request, and it is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Recommendations: For version 1.0, consider disabling the unknown function in the /vote.php file of the Backend component until a patch is available. Restrict access to the /vote.php file to minimize the risk of exploitation. Avoid using the affected function in the Backend component until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** code-projects Hostel Management Site version 1.0 **Description** A problem was found in the code, affecting unknown parts of the file room-details.php, leading to cross site scripting. The attack can be initiated remotely. **Recommendations** For code-projects Hostel Management Site version 1.0, consider restricting access to the room-details.php file until a patch is available. As a temporary workaround, avoid using the file room-details.php to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.