Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2023-4442MEDIUMSourceCodester Free Hospital Management System for Small Practices booking-complete.php sql injectionEPSS 0.7%CVE-2024-4946MEDIUMSourceCodester Online Art Gallery Management System adminHome.php unrestricted uploadEPSS 0.7%CVE-2024-5976MEDIUMSourceCodester Employee and Visitor Gate Pass Logging System log_employee sql injectionEPSS 0.7%CVE-2023-1130MEDIUMSourceCodester Computer Parts Sales and Inventory System processlogin sql injectionEPSS 0.7%CVE-2024-2574HIGHSourceCodester Employee Task Management System edit-task.php authorizationEPSS 0.7%CVE-2024-2575HIGHSourceCodester Employee Task Management System task-details.php authorizationEPSS 0.7%CVE-2024-2576HIGHSourceCodester Employee Task Management System update-admin.php authorizationEPSS 0.7%CVE-2024-2577HIGHSourceCodester Employee Task Management System update-employee.php authorizationEPSS 0.7%CVE-2022-2646LOWSourceCodester Online Admission System index.php cross site scriptingEPSS 0.7%CVE-2024-3221MEDIUMSourceCodester PHP Task Management System attendance-info.php sql injectionEPSS 0.7%CVE-2024-3223MEDIUMSourceCodester PHP Task Management System admin-manage-user.php sql injectionEPSS 0.7%CVE-2024-3222MEDIUMSourceCodester PHP Task Management System admin-password-change.php sql injectionEPSS 0.7%CVE-2024-6280MEDIUMSourceCodester Simple Online Bidding System unrestricted uploadEPSS 0.7%CVE-2024-7748MEDIUMSourceCodester Accounts Manager App delete-account.php sql injectionEPSS 0.7%CVE-2024-11214MEDIUMSourceCodester Best Employee Management System profile.php unrestricted uploadEPSS 0.7%CVE-2024-7797MEDIUMSourceCodester Simple Online Bidding System ajax.php sql injectionEPSS 0.7%CVE-2023-2667LOWSourceCodester Lost and Found Information System cross site scriptingEPSS 0.7%CVE-2024-2153MEDIUMSourceCodester Online Mobile Management Store view_order.php sql injectionEPSS 0.7%CVE-2023-2217MEDIUMSourceCodester Task Reminder System manage_reminder.php sql injectionEPSS 0.7%CVE-2023-2218MEDIUMSourceCodester Task Reminder System manage_user.php sql injectionEPSS 0.7%