Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2024-8151MEDIUMSourceCodester Interactive Map with Marker delete-mark.php cross site scriptingEPSS 0.5%CVE-2024-7664MEDIUMSourceCodester Car Driving School Management System view_details.php sql injectionEPSS 0.5%CVE-2024-4930MEDIUMSourceCodester Simple Online Bidding System sql injectionEPSS 0.5%CVE-2024-7223MEDIUMSourceCodester Lot Reservation Management System view_model.php sql injectionEPSS 0.5%CVE-2026-86277MEDIUMSourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorizationEPSS 0.5%CVE-2026-5326MEDIUMSourceCodester Leave Application System User Information index.php authorizationEPSS 0.5%CVE-2024-2069MEDIUMSourceCodester FAQ Management System delete-faq.php sql injectionEPSS 0.5%CVE-2023-0774HIGHSourceCodester Medical Certificate Generator App action.php sql injectionEPSS 0.5%CVE-2024-7660MEDIUMSourceCodester File Manager App Add File cross site scriptingEPSS 0.5%CVE-2022-3949LOWSourcecodester Simple Cashiering System User Account cross site scriptingEPSS 0.5%CVE-2024-6650MEDIUMSourceCodester Employee and Visitor Gate Pass Logging System Master.php save_designation cross site scriptingEPSS 0.5%CVE-2025-1191MEDIUMSourceCodester Multi Restaurant Table Reservation System approve-reject.php sql injectionEPSS 0.5%CVE-2025-5371MEDIUMSourceCodester Health Center Patient Record Management System admin.php sql injectionEPSS 0.5%CVE-2025-6871MEDIUMSourceCodester Simple Company Website Login.php sql injectionEPSS 0.5%CVE-2024-9973MEDIUMSourceCodester Online Eyewear Shop Report Viewing Page page sql injectionEPSS 0.5%CVE-2024-1922LOWSourceCodester Online Job Portal Manage Job Page ManageJob.php cross site scriptingEPSS 0.5%CVE-2024-7225MEDIUMSourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scriptingEPSS 0.5%CVE-2025-4816MEDIUMSourceCodester Doctor's Appointment System GET Parameter appointment.php sql injectionEPSS 0.5%CVE-2025-4817MEDIUMSourcecodester Doctor's Appointment System GET Parameter delete-appointment.php sql injectionEPSS 0.5%CVE-2025-4818MEDIUMSourceCodester Doctor's Appointment System GET Parameter delete-doctor.php sql injectionEPSS 0.5%