Vulnerabilidades de SourceCodester
CVEs publicadas que afetam produtos de SourceCodester: 508 registro(s), com severidade, exploração e correções.
Class and Exam Timetabling System 59Pharmacy Sales and Inventory System 30Pizzafy Ecommerce System 27Sales and Inventory System 21Drug Recommendation System 17Online Reviewer Management System 15Hotel and Lodge Management System 15Pet Grooming Management Software 14Patients Waiting Area Queue Management System 13Simple Online Food Ordering System 13Hospitals Patient Records Management System 8CET Automated Grading System with AI Predictive Analytics 8Inventory Management System 8Student Grades Management System 7Syllabus-Aligned Learning Management & Examination System 7Onlne Examination & Learning Management System 7Simple Doctors Appointment System 6Performance Indicator System 6Simple and Nice Shopping Cart Script 6Best House Rental Management System 6Multi-Vendor Online Grocery Management System 6Photo Share Website 5SUP Online Shopping 5Online Food Ordering System 5Student Result Management System 5Client Database Management System 5Online Book Store System 5Farm Management System 5Online Voting System 5Web-based Pharmacy Product Management System 4Indian Invoicing System 4Simple Responsive Tourism Website 4Simple POS and Inventory System 4Resort Reservation System 4Best Salon Management System 4School Registration and Fee System 4Online Faculty Clearance System 4Train Station Ticketing System 4Food Ordering System 3Leave Application System 3
CVE-2026-10877
Alta · 7.3
CWE-74 04/06/2026
SourceCodester Ship Ferry Ticket Reservation System Admin Login login.php sql injection
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System up to 1.0. This impacts an unknown function of the file /admin/login.php of the component Admin Login. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-10876
Média · 6.3
CWE-266 04/06/2026
SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
CVE-2026-10704
Alta · 7.3
CWE-74 02/06/2026
SourceCodester Pizzafy E-Commerce System Administrative Control Panel admin_class_novo.php login sql injection
A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0. Affected by this vulnerability is the function Login of the file /admin/admin_class_novo.php of the component Administrative Control Panel. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.
CVE-2026-10694
Alta · 7.3
CWE-73 02/06/2026
SourceCodester Online Food Ordering System index.php include file inclusion
A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in file inclusion. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2026-10693
Média · 6.3
CWE-266 02/06/2026
SourceCodester Online Boat Reservation System Administrative Endpoint improper authorization
A security vulnerability has been detected in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the component Administrative Endpoint. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.
CVE-2026-10624
Média · 4.3
CWE-99 02/06/2026
SourceCodester Human Resource Management Employee View detailview.php resource injection
A vulnerability has been found in SourceCodester Human Resource Management 1.0. Affected by this vulnerability is an unknown functionality of the file /detailview.php of the component Employee View Page. Such manipulation of the argument employeeid leads to improper control of resource identifiers. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVE-2026-10559
Média · 6.3
CWE-73 01/06/2026
SourceCodester Pizzafy Ecommerce System index.php file inclusion
A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is an unknown function of the file /index.php. Executing a manipulation of the argument page can lead to file inclusion. The attack may be performed from remote. The exploit has been published and may be used.
CVE-2026-10558
Média · 6.3
CWE-73 01/06/2026
SourceCodester Pizzafy Ecommerce System index.php file inclusion
A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument page results in file inclusion. The attack is possible to be carried out remotely. The exploit is now public and may be used.
CVE-2026-10295
Baixa · 3.3
CWE-404 01/06/2026
SourceCodester Customer Review App review_app.py get_all_reviews denial of service
A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py. Performing a manipulation of the argument name/comment results in denial of service. The attack requires a local approach. The exploit has been made public and could be used.
CVE-2026-10287
Alta · 7.3
CWE-918 01/06/2026
SourceCodester SEO Meta Tag Extractor index.php get_headers server-side request forgery
A vulnerability was determined in SourceCodester SEO Meta Tag Extractor 1.0. This vulnerability affects the function get_headers of the file /index.php. This manipulation of the argument url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-10263
Alta · 7.3
CWE-74 01/06/2026
SourceCodester Computer Repair Shop Management System manage_product.php sql injection
A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0. Affected is an unknown function of the file /admin/products/manage_product.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.
CVE-2026-10255
Média · 5.3
CWE-266 01/06/2026
SourceCodester Pharmacy Sales and Inventory System ShowForm.php sell_statement access control
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function sell_statement of the file application/controllers/ShowForm.php. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-10254
Média · 5.3
CWE-200 01/06/2026
SourceCodester Pet Grooming Management Software admin file information disclosure
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/. This manipulation causes file and directory information exposure. The attack can be initiated remotely. The exploit has been published and may be used.
CVE-2026-10248
Média · 4.7
CWE-74 01/06/2026
SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injection
A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System up to 1.0. This issue affects the function create_supplier of the file /Export_csv/export of the component Supplier Creation Interface. This manipulation of the argument Address/Company Name causes csv injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
CVE-2026-10247
Baixa · 3.5
CWE-79 01/06/2026
SourceCodester Pharmacy Sales and Inventory System main create_generic_name cross site scripting
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects the function create_generic_name of the file /ShowForm/create_generic_name/main. The manipulation of the argument generic_name results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used.
CVE-2026-10246
Baixa · 3.5
CWE-79 01/06/2026
SourceCodester Pharmacy Sales and Inventory System main create_medicine_presentation cross site scripting
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function create_medicine_presentation of the file /ShowForm/create_medicine_presentation/main. The manipulation of the argument medicine_presentation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-10245
Baixa · 3.5
CWE-79 01/06/2026
SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function create_supplier of the file /ShowForm/create_supplier/main. Executing a manipulation of the argument company_name can lead to cross site scripting. The attack can be launched remotely. The exploit has been published and may be used.
CVE-2026-10244
Baixa · 3.5
CWE-79 01/06/2026
SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scripting
A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function create_medicine_name of the file /ShowForm/create_medicine_name/main. Performing a manipulation of the argument medicine_name results in cross site scripting. The attack can be initiated remotely. The exploit is now public and may be used.
CVE-2026-10237
Média · 4.7
CWE-74 01/06/2026
SourceCodester Water Billing Management System User Management manage_user sql injection
A vulnerability was found in SourceCodester Water Billing Management System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user of the component User Management Module. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
CVE-2026-10236
Alta · 7.3
CWE-266 01/06/2026
SourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorization
A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save of the component User Management Endpoint. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-10185
Alta · 7.3
CWE-74 31/05/2026
SourceCodester Hospitals Patient Records Management System Users.php save sql injection
A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
CVE-2026-10184
Alta · 7.3
CWE-74 31/05/2026
SourceCodester Hospitals Patient Records Management System Users.php delete sql injection
A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-9603
Média · 6.5
CWE-862 26/05/2026
SourceCodester eDoc Doctor Appointment System delete-session.php authorization
A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0. This affects an unknown part of the file /admin/delete-session.php. The manipulation of the argument ID leads to missing authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVE-2026-9583
Média · 4.3
CWE-200 26/05/2026
SourceCodester CET Automated Grading System with AI Predictive Analytics SQL index.php information exposure
A weakness has been identified in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This impacts an unknown function of the file /index.php of the component SQL Handler. Executing a manipulation can lead to information exposure through error message. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVE-2026-9582
Média · 4.3
CWE-352 26/05/2026
SourceCodester CET Automated Grading System with AI Predictive Analytics cross-site request forgery
A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This affects an unknown function. Performing a manipulation results in cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.