Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2023-4183MEDIUMSourceCodester Inventory Management System Password edit_update.php access controlEPSS 0.5%CVE-2025-12257MEDIUMSourceCodester Online Student Result System view_result.php sql injectionEPSS 0.5%CVE-2023-3678MEDIUMSourceCodester AC Repair and Services System HTTP POST Request sql injectionEPSS 0.5%CVE-2023-5018MEDIUMSourceCodester Lost and Found Information System POST Parameter sql injectionEPSS 0.5%CVE-2025-6872MEDIUMSourceCodester Simple Company Website SystemSettings.php unrestricted uploadEPSS 0.5%CVE-2025-6873MEDIUMSourceCodester Simple Company Website Users.php unrestricted uploadEPSS 0.5%CVE-2024-10420MEDIUMSourceCodester Attendance and Payroll System update.php upload unrestricted uploadEPSS 0.5%CVE-2024-2070LOWSourceCodester FAQ Management System add-faq.php cross site scriptingEPSS 0.5%CVE-2025-6346MEDIUMSourceCodester Advance Charity Management System fundDetails.php sql injectionEPSS 0.5%CVE-2023-5273LOWSourceCodester Best Courier Management System manage_parcel_status.php cross site scriptingEPSS 0.5%CVE-2024-7749MEDIUMSourceCodester Accounts Manager App add-account.php cross site scriptingEPSS 0.5%CVE-2024-6212MEDIUMSourceCodester Simple Student Attendance System student_form.php get_student cross site scriptingEPSS 0.5%CVE-2022-3992LOWSourceCodester Sanitization Management System Banner Image cross site scriptingEPSS 0.5%CVE-2026-14719MEDIUMSourceCodester Onlne Examination & Learning Management System Registration Endpoint register.php privileges managementEPSS 0.5%CVE-2026-14778MEDIUMSourceCodester Onlne Examination & Learning Management System Enrollment Management ajax_enroll.php improper authorizationEPSS 0.5%CVE-2026-14690MEDIUMSourceCodester Multi-Vendor Online Grocery Management System Users.php save_users improper authorizationEPSS 0.5%CVE-2026-85512MEDIUMSourceCodester Class and Exam Timetabling System session.php authorizationEPSS 0.5%CVE-2026-86276MEDIUMSourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentialsEPSS 0.5%CVE-2026-90856MEDIUMSourceCodester College Notes Gallery Management System Registration Flow signup.php privileges managementEPSS 0.5%CVE-2023-0964MEDIUMSourceCodester Sales Tracker Management System view_product.php sql injectionEPSS 0.5%