Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2023-1113LOWSourceCodester Simple Payroll System POST Parameter cross site scriptingEPSS 0.6%CVE-2023-3165LOWSourceCodester Life Insurance Management System POST Parameter insertNominee.php cross site scriptingEPSS 0.6%CVE-2023-1353LOWSourceCodester Design and Implementation of Covid-19 Directory on Vaccination System verification.php cross site scriptingEPSS 0.6%CVE-2022-2691LOWSourceCodester Wedding Hall Booking System Profile Page cross site scriptingEPSS 0.6%CVE-2022-3546LOWSourceCodester Simple Cold Storage Management System Create User cross site scriptingEPSS 0.6%CVE-2023-1567LOWSourceCodester Student Study Center Desk Management System assign.php cross site scriptingEPSS 0.6%CVE-2022-3014LOWSourceCodester Simple Task Managing System cross site scriptingEPSS 0.6%CVE-2022-2692LOWSourceCodester Wedding Hall Booking System Staff User Profile cross site scriptingEPSS 0.6%CVE-2025-0802MEDIUMSourceCodester Best Employee Management System Administrative Endpoint View_user.php access controlEPSS 0.6%CVE-2024-2935MEDIUMSourceCodester Todo List in Kanban Board Add ToDo cross site scriptingEPSS 0.6%CVE-2022-3414MEDIUMSourceCodester Web-Based Student Clearance System POST Parameter login.php sql injectionEPSS 0.6%CVE-2025-4331MEDIUMSourceCodester Online Student Clearance System login.php sql injectionEPSS 0.6%CVE-2025-4314MEDIUMSourceCodester Advanced Web Store index.php sql injectionEPSS 0.6%CVE-2024-4928MEDIUMSourceCodester Simple Online Bidding System sql injectionEPSS 0.6%CVE-2023-1040MEDIUMSourceCodester Online Graduate Tracer System add_acc.php sql injectionEPSS 0.6%CVE-2026-3746MEDIUMSourceCodester Simple Responsive Tourism Website Login Login.php sql injectionEPSS 0.6%CVE-2025-4312MEDIUMSourceCodester Advanced Web Store productdetail.php sql injectionEPSS 0.6%CVE-2024-4933MEDIUMSourceCodester Simple Online Bidding System sql injectionEPSS 0.6%CVE-2023-0987LOWSourceCodester Online Pizza Ordering System cross site scriptingEPSS 0.6%CVE-2025-4313MEDIUMSourceCodester Advanced Web Store admin_addnew_product.php sql injectionEPSS 0.6%