Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2026-5812MEDIUMSourceCodester Pharmacy Product Management System POST Parameter add-sales.php logic errorEPSS 0.4%CVE-2025-9702MEDIUMSourceCodester Simple Cafe Billing System sales_report.php sql injectionEPSS 0.4%CVE-2025-9704MEDIUMSourceCodester Water Billing System viewbill.php sql injectionEPSS 0.4%CVE-2025-9701MEDIUMSourceCodester Simple Cafe Billing System receipt.php sql injectionEPSS 0.4%CVE-2025-10078MEDIUMSourceCodester Online Polling System candidates.php sql injectionEPSS 0.4%CVE-2026-5811MEDIUMSourceCodester Online Food Ordering System POST Parameter Actions.php save_product logic errorEPSS 0.4%CVE-2025-9759MEDIUMCampcodes/SourceCodester Courier Management System ajax.php signup sql injectionEPSS 0.4%CVE-2025-9700MEDIUMSourceCodester Online Book Store publisher_list.php sql injectionEPSS 0.4%CVE-2022-4738MEDIUMSourceCodester Blood Bank Management System User Registration cross site scriptingEPSS 0.4%CVE-2025-12226MEDIUMSourceCodester Best House Rental Management System admin_class.php save_house sql injectionEPSS 0.4%CVE-2024-2065LOWSourceCodester Barangay Population Monitoring System update-resident.php cross site scriptingEPSS 0.4%CVE-2026-90697MEDIUMSourceCodester Inventory Management System invoice.php authorizationEPSS 0.4%CVE-2026-14691MEDIUMSourceCodester Multi-Vendor Online Grocery Management System Setting SystemSettings.php update_settings_info code injectionEPSS 0.4%CVE-2025-3297MEDIUMSourceCodester Online Eyewear Shop Master.php cross site scriptingEPSS 0.4%CVE-2024-9089MEDIUMSourceCodester Modern Loan Management System update_loan_record.php cross site scriptingEPSS 0.4%CVE-2024-9323MEDIUMSourceCodester Inventory Management System add_staff.php cross site scriptingEPSS 0.4%CVE-2024-8559MEDIUMSourceCodester Online Food Menu delete-menu.php sql injectionEPSS 0.4%CVE-2025-6870MEDIUMSourceCodester Simple Company Website Content.php unrestricted uploadEPSS 0.4%CVE-2024-11262MEDIUMSourceCodester Student Record Management System View All Student Marks main stack-based overflowEPSS 0.4%CVE-2025-10077MEDIUMSourceCodester Online Polling System registeracc.php sql injectionEPSS 0.4%