Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2026-76995MEDIUMSourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted uploadEPSS 0.4%CVE-2025-10617MEDIUMSourceCodester Online Polling System positions.php sql injectionEPSS 0.4%CVE-2025-3825MEDIUMSourceCodester Web-based Pharmacy Product Management System add-category.php cross site scriptingEPSS 0.4%CVE-2026-19839MEDIUMSourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted uploadEPSS 0.4%CVE-2024-8140MEDIUMSourceCodester Task Progress Tracker update-task.php cross site scriptingEPSS 0.4%CVE-2026-1154MEDIUMSourceCodester E-Learning System Lesson index.php cross site scriptingEPSS 0.4%CVE-2025-10410MEDIUMSourceCodester Link Status Checker index.php server-side request forgeryEPSS 0.4%CVE-2025-3296MEDIUMSourceCodester Online Eyewear Shop Users.php sql injectionEPSS 0.4%CVE-2025-1169MEDIUMSourceCodester Image Compressor Tool compressor.php cross site scriptingEPSS 0.4%CVE-2023-0732LOWSourceCodester Online Eyewear Shop POST Request Users.php registration cross site scriptingEPSS 0.4%CVE-2026-3737MEDIUMSourceCodester Pet Grooming Management Software User Creation add_user.php improper authorizationEPSS 0.4%CVE-2024-10559MEDIUMSourceCodester Airport Booking Management System details buffer overflowEPSS 0.4%CVE-2023-3659LOWSourceCodester AC Repair and Services System cross site scriptingEPSS 0.4%CVE-2023-1447LOWSourceCodester Medicine Tracker System cross site scriptingEPSS 0.4%CVE-2024-7645MEDIUMSourceCodester Clinics Patient Management System User Page users.php cross-site request forgeryEPSS 0.4%CVE-2026-11518MEDIUMSourceCodester Inventory System User Management users.php cross site scriptingEPSS 0.4%CVE-2026-3738MEDIUMSourceCodester Pet Grooming Management Software Financial Report improper authorizationEPSS 0.4%CVE-2023-1593LOWSourceCodester Automatic Question Paper Generator System cross site scriptingEPSS 0.4%CVE-2025-13561MEDIUMSourceCodester Company Website CMS index.php sql injectionEPSS 0.4%CVE-2025-13560MEDIUMSourceCodester Company Website CMS reset-password.php sql injectionEPSS 0.4%