Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2024-5134MEDIUMSourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injectionEPSS 0.6%CVE-2024-6729MEDIUMSourceCodester Kortex Lite Advocate Office Management System add_act.php sql injectionEPSS 0.6%CVE-2024-7289MEDIUMSourceCodester Establishment Billing Management System manage_payment.php sql injectionEPSS 0.6%CVE-2023-1418LOWSourceCodester Friendly Island Pizza Website and Ordering System POST Parameter cashconfirm.php cross site scriptingEPSS 0.6%CVE-2024-7308MEDIUMSourceCodester Establishment Billing Management System view_bill.php sql injectionEPSS 0.6%CVE-2024-7363MEDIUMSourceCodester Tracking Monitoring Management System manage_person.php sql injectionEPSS 0.6%CVE-2025-4937MEDIUMSourceCodester Apartment Visitor Management System profile.php sql injectionEPSS 0.6%CVE-2025-4898MEDIUMSourceCodester Student Result Management System Logo File update_system.php unlink path traversalEPSS 0.6%CVE-2022-3518LOWSourceCodester Sanitization Management System User Creation cross site scriptingEPSS 0.6%CVE-2023-0532MEDIUMSourceCodester Online Tours & Travels Management System disapprove_user.php sql injectionEPSS 0.6%CVE-2023-0534MEDIUMSourceCodester Online Tours & Travels Management System expense_report.php sql injectionEPSS 0.6%CVE-2023-0531MEDIUMSourceCodester Online Tours & Travels Management System booking_report.php sql injectionEPSS 0.6%CVE-2023-2397LOWSourceCodester Simple Mobile Comparison Website cross site scriptingEPSS 0.6%CVE-2022-2292LOWSourceCodester Hotel Management System Room Edit Page 1 cross site scriptingEPSS 0.6%CVE-2024-1010LOWSourceCodester Employee Management System edit-profile.php cross site scriptingEPSS 0.6%CVE-2022-2690LOWSourceCodester Wedding Hall Booking System Booking Form cross site scriptingEPSS 0.6%CVE-2022-2293LOWSourceCodester Simple Sales Management System create cross site scriptingEPSS 0.6%CVE-2022-2213LOWSourceCodester Library Management System cross site scriptingEPSS 0.6%CVE-2023-3183LOWSourceCodester Performance Indicator System addproduct.php cross site scriptingEPSS 0.6%CVE-2022-3733MEDIUMSourceCodester Web-Based Student Clearance System edit-admin.php sql injectionEPSS 0.6%