Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2024-6471MEDIUMSourceCodester Online Tours & Travels Management sms_setting.php sql injectionEPSS 0.6%CVE-2023-1302LOWSourceCodester File Tracker Manager System borrow1.php cross site scriptingEPSS 0.6%CVE-2022-2800MEDIUMSourceCodester Gym Management System clickjackingEPSS 0.6%CVE-2023-3318LOWSourceCodester Resort Management System cross site scriptingEPSS 0.6%CVE-2023-3534MEDIUMSourceCodester Shopping Website check_availability.php sql injectionEPSS 0.6%CVE-2023-0303MEDIUMSourceCodester Online Food Ordering System view_prod.php sql injectionEPSS 0.6%CVE-2023-0305MEDIUMSourceCodester Online Food Ordering System Login Module admin_class.php sql injectionEPSS 0.6%CVE-2023-1364MEDIUMSourceCodester Online Pizza Ordering System GET Parameter category.php sql injectionEPSS 0.6%CVE-2022-3473MEDIUMSourceCodester Human Resource Management System getstatecity.php sql injectionEPSS 0.6%CVE-2022-2814LOWSourceCodester Simple and Nice Shopping Cart Script login.php cross site scriptingEPSS 0.6%CVE-2022-2811LOWSourceCodester Guest Management System myform.php cross site scriptingEPSS 0.6%CVE-2023-0304MEDIUMSourceCodester Online Food Ordering System Signup Module admin_class.php sql injectionEPSS 0.6%CVE-2022-2767LOWSourceCodester Online Admission System index.php cross site scriptingEPSS 0.6%CVE-2025-10801MEDIUMSourceCodester Pet Grooming Management Software edit_tax.php sql injectionEPSS 0.6%CVE-2024-4931MEDIUMSourceCodester Simple Online Bidding System sql injectionEPSS 0.6%CVE-2023-0530MEDIUMSourceCodester Online Tours & Travels Management System approve_user.php sql injectionEPSS 0.6%CVE-2026-3817MEDIUMSourceCodester Patients Waiting Area Queue Management System patient-search.php improper authorizationEPSS 0.6%CVE-2024-7222MEDIUMSourceCodester Lot Reservation Management System home.php sql injectionEPSS 0.6%CVE-2022-2087LOWSourceCodester Bank Management System cross site scriptingEPSS 0.6%CVE-2026-2848MEDIUMSourceCodester Simple Responsive Tourism Website Registration Master.php sql injectionEPSS 0.6%