Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2025-10483MEDIUMSourceCodester Online Student File Management System save_user.php sql injectionEPSS 0.4%CVE-2023-5836MEDIUMSourceCodester Task Reminder System sql injectionEPSS 0.4%CVE-2025-10083MEDIUMSourceCodester Pet Grooming Management Software profile.php unrestricted uploadEPSS 0.4%CVE-2025-9771MEDIUMSourceCodester Eye Clinic Management System search_index_Diagnosis.php sql injectionEPSS 0.4%CVE-2024-6968MEDIUMSourceCodester Clinics Patient Management System print_patients_visits.php sql injectionEPSS 0.4%CVE-2023-4869MEDIUMSourceCodester Contact Manager App update.php cross-site request forgeryEPSS 0.4%CVE-2025-9788MEDIUMSourceCodester/Campcodes School Log Management System admin_class.php sql injectionEPSS 0.4%CVE-2023-5286LOWSourceCodester Expense Tracker App Category add_category.php cross site scriptingEPSS 0.4%CVE-2024-12536MEDIUMSourceCodester Kortex Lite Advocate Office Management System client_data.php cross site scriptingEPSS 0.4%CVE-2026-5811MEDIUMSourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic errorEPSS 0.4%CVE-2025-10082MEDIUMSourceCodester Online Polling System manage-admins.php sql injectionEPSS 0.4%CVE-2025-9700MEDIUMSourceCodester Online Book Store publisher_list.php sql injectionEPSS 0.4%CVE-2025-10078MEDIUMSourceCodester Online Polling System candidates.php sql injectionEPSS 0.4%CVE-2025-9759MEDIUMCampcodes/SourceCodester Courier Management System ajax.php signup sql injectionEPSS 0.4%CVE-2024-8560MEDIUMSourceCodester Simple Invoice Generator System save_invoice.php sql injectionEPSS 0.4%CVE-2025-11614MEDIUMSourceCodester Best Salon Management System edit-appointment.php sql injectionEPSS 0.4%CVE-2025-9705MEDIUMSourceCodester Water Billing System paybill.php sql injectionEPSS 0.4%CVE-2025-9706MEDIUMSourceCodester Water Billing System edit.php sql injectionEPSS 0.4%CVE-2024-1111MEDIUMSourceCodester QR Code Login System add-user.php cross site scriptingEPSS 0.4%CVE-2025-9704MEDIUMSourceCodester Water Billing System viewbill.php sql injectionEPSS 0.4%