Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:online_fir_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductOnline Fir System (7aa18f32-f789-530d-925c-3c2f34292c96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5666 vulnerable 2026-06-08 08:07:03.963363 code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information
MEDIUM (5.3)
A vulnerability was detected in code-projects Online FIR System 1.0. Affected by this issue is some unknown functionality of the file /complaints.sql of the component SQL Database Backup File Handler. The manipulation results in insecure storage of sensitive information. The attack may be performed from remote. The exploit is now public and may be used.
Published: 2026-04-06T15:30:13.502Z
Updated: 2026-04-07T16:00:58.394Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5665 vulnerable 2026-06-08 08:07:03.962902 code-projects Online FIR System Login checklogin.php sql injection
HIGH (7.3)
A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-04-06T15:15:12.944Z
Updated: 2026-04-06T15:34:25.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0503 vulnerable 2026-06-08 06:22:01.238474 code-projects Online FIR System registercomplaint.php cross site scripting
LOW (3.5)
A vulnerability was found in code-projects Online FIR System 1.0. It has been classified as problematic. This affects an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250611.
Published: 2024-01-13T20:31:03.981Z
Updated: 2024-08-30T19:05:29.146Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.