Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2025-10396MEDIUMSourceCodester Pet Grooming Management Software edit_role.php sql injectionEPSS 0.5%CVE-2026-4617MEDIUMSourceCodester Patients Waiting Area Queue Management System Patient Check-In api_patient_checkin.php ValidateToken improper authorizationEPSS 0.5%CVE-2025-11615MEDIUMSourceCodester Best Salon Management System add_invoice.php sql injectionEPSS 0.5%CVE-2026-13568MEDIUMSourceCodester Inventory Management System User Registration Endpoint users_handler.php access controlEPSS 0.5%CVE-2024-13021MEDIUMSourceCodester Road Accident Map Marker add-mark.php cross site scriptingEPSS 0.5%CVE-2025-2377MEDIUMSourceCodester Vehicle Management System confirmbooking.php cross site scriptingEPSS 0.5%CVE-2026-78060MEDIUMSourceCodester Stock Management System getOrderReport.php cross site scriptingEPSS 0.5%CVE-2026-86278MEDIUMSourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scriptingEPSS 0.5%CVE-2026-16485MEDIUMSourceCodester Class and Exam Timetabling System class.php cross site scriptingEPSS 0.5%CVE-2026-86294MEDIUMSourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scriptingEPSS 0.5%CVE-2026-15595MEDIUMSourceCodester Class and Exam Timetabling System forsubject.php cross site scriptingEPSS 0.5%CVE-2026-75078MEDIUMSourceCodester Class and Exam Timetabling System BSHRM1.php cross site scriptingEPSS 0.5%CVE-2026-78055MEDIUMSourceCodester Class and Exam Timetabling System BSIT2.php cross site scriptingEPSS 0.5%CVE-2026-75077MEDIUMSourceCodester Class and Exam Timetabling System BSCE2.php cross site scriptingEPSS 0.5%CVE-2026-94035MEDIUMSourceCodester Drug Recommendation System index.php cross site scriptingEPSS 0.5%CVE-2026-15596MEDIUMSourceCodester Class and Exam Timetabling System subject.php cross site scriptingEPSS 0.5%CVE-2026-90615MEDIUMSourceCodester Class and Exam Timetabling System subject1.php cross site scriptingEPSS 0.5%CVE-2024-7686MEDIUMSourceCodester Kortex Lite Advocate Office Management System register_case.php cross site scriptingEPSS 0.5%CVE-2026-16486MEDIUMSourceCodester Class and Exam Timetabling System BSIS.php cross site scriptingEPSS 0.5%CVE-2026-82554MEDIUMSourceCodester Queue Management System add_customer.php cross site scriptingEPSS 0.5%