Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2025-13468MEDIUMSourceCodester Alumni Management System Delete admin_class.php delete_event authorizationEPSS 0.4%CVE-2026-4013MEDIUMSourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorizationEPSS 0.4%CVE-2025-6867MEDIUMSourceCodester Simple Company Website manage.php sql injectionEPSS 0.4%CVE-2024-10380MEDIUMSourceCodester Petrol Pump Management Software ajax_product.php sql injectionEPSS 0.4%CVE-2026-92385MEDIUMSourceCodester Online Food Ordering System Category Update update_category.php cross site scriptingEPSS 0.4%CVE-2025-14206MEDIUMSourceCodester Online Student Clearance System Fee Table delete-fee.php improper authorizationEPSS 0.4%CVE-2025-12597MEDIUMSourceCodester Best House Rental Management System admin_class.php save_category sql injectionEPSS 0.4%CVE-2025-12598MEDIUMSourceCodester Best House Rental Management System admin_class.php save_tenant sql injectionEPSS 0.4%CVE-2026-16226MEDIUMSourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted uploadEPSS 0.4%CVE-2025-12614MEDIUMSourceCodester Best House Rental Management System admin_class.php delete_payment sql injectionEPSS 0.4%CVE-2026-7393MEDIUMSourceCodester Pizzafy Ecommerce System File Extension admin_class_novo.php save_menu unrestricted uploadEPSS 0.4%CVE-2026-5576MEDIUMSourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted uploadEPSS 0.4%CVE-2025-13343MEDIUMSourceCodester Interview Management System editQuestion.php cross site scriptingEPSS 0.4%CVE-2026-2150MEDIUMSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scriptingEPSS 0.4%CVE-2026-19064MEDIUMSourceCodester Online Examination & Learning Management System view.php authorizationEPSS 0.4%CVE-2026-14608MEDIUMSourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorizationEPSS 0.4%CVE-2026-19066MEDIUMSourceCodester Online Examination & Learning Management System view_students.php authorizationEPSS 0.4%CVE-2026-2159MEDIUMSourceCodester Simple Responsive Tourism Website Registration Master.php cross site scriptingEPSS 0.4%CVE-2026-2149MEDIUMSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scriptingEPSS 0.4%CVE-2025-3763MEDIUMSourceCodester Phone Management System Password main buffer overflowEPSS 0.4%