Code-Projects Vehicle Management System vulnerabilities

CVE-2026-11344 [HIGH] CWE-284 CVE-2026-11344: A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown fu A vulnerability was found in code-projects Vehicle Management System 1.0. This impacts an unknown function of the file newdriver.php of the component New Driver Registration Form. Performing a manipulation of the argument photo results in unrestricted upload. The attack may be initiated remotely. The exploit has been made public and could be used.

CVE-2026-85516 [HIGH] CWE-74 CVE-2026-85516: A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.

CVE-2026-85517 [MEDIUM] CWE-200 CVE-2026-85517: A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unk A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be u