Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2024-4926MEDIUMSourceCodester School Intramurals Student Attendance Management System manage_student.php sql injectionEPSS 0.5%CVE-2024-5099MEDIUMSourceCodester Simple Inventory System updateprice.php sql injectionEPSS 0.5%CVE-2024-7370MEDIUMSourceCodester Simple Realtime Quiz System manage_quiz.php sql injectionEPSS 0.5%CVE-2024-4925MEDIUMSourceCodester School Intramurals Student Attendance Management System manage_course.php sql injectionEPSS 0.5%CVE-2024-7929MEDIUMSourceCodester Simple Forum Website Signup Page registration.php cross site scriptingEPSS 0.5%CVE-2024-8554MEDIUMSourceCodester Clinics Patient Management System users.php cross site scriptingEPSS 0.5%CVE-2024-7685MEDIUMSourceCodester Kortex Lite Advocate Office Management System adds.php cross site scriptingEPSS 0.5%CVE-2024-10353MEDIUMSourceCodester Online Exam System admin-dashboard access controlEPSS 0.5%CVE-2025-4247MEDIUMSourceCodester Simple To-Do List System delete_task.php sql injectionEPSS 0.5%CVE-2025-5208MEDIUMSourceCodester Online Hospital Management System check_availability.php sql injectionEPSS 0.5%CVE-2025-4196MEDIUMSourceCodester Patient Record Management System birthing.php sql injectionEPSS 0.5%CVE-2025-4173MEDIUMSourceCodester Online Eyewear Shop Master.php delete_cart sql injectionEPSS 0.5%CVE-2026-3302MEDIUMSourceCodester Doctor Appointment System Sign Up register.php cross site scriptingEPSS 0.5%CVE-2024-7666MEDIUMSourceCodester Car Driving School Management System view_package.php sql injectionEPSS 0.5%CVE-2024-3139MEDIUMSourceCodester Computer Laboratory Management System save_users improper authorizationEPSS 0.5%CVE-2025-4787MEDIUMSourceCodester/oretnom23 Stock Management System view_sale sql injectionEPSS 0.5%CVE-2025-4806MEDIUMSourceCodester/oretnom23 Stock Management System view_bo sql injectionEPSS 0.5%CVE-2025-4923MEDIUMSourceCodester Client Database Management System user_delivery_update.php unrestricted uploadEPSS 0.5%CVE-2026-15715MEDIUMSourceCodester Class and Exam Timetabling System exam.php cross site scriptingEPSS 0.5%CVE-2026-3800MEDIUMSourceCodester/janobe Resort Reservation System controller.php doInsert unrestricted uploadEPSS 0.5%