Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2023-3340MEDIUMSourceCodester Online School Fees System GET Parameter ajx.php sql injectionEPSS 0.8%CVE-2022-2842HIGHSourceCodester Gym Management System login.php sql injectionEPSS 0.8%CVE-2023-3152MEDIUMSourceCodester Online Discussion Forum Site view_post.php sql injectionEPSS 0.8%CVE-2023-3149MEDIUMSourceCodester Online Discussion Forum Site manage_user.php sql injectionEPSS 0.8%CVE-2022-2678MEDIUMSourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted uploadEPSS 0.8%CVE-2022-2909MEDIUMSourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted uploadEPSS 0.8%CVE-2022-2694MEDIUMSourceCodester Company Website CMS unrestricted uploadEPSS 0.8%CVE-2023-2344MEDIUMSourceCodester Service Provider Management System HTTP POST Request sql injectionEPSS 0.8%CVE-2023-2371MEDIUMSourceCodester Online DJ Management System GET Parameter view_details.php sql injectionEPSS 0.8%CVE-2023-3003MEDIUMSourceCodester Train Station Ticketing System GET Parameter manage_prices.php sql injectionEPSS 0.8%CVE-2024-2148MEDIUMSourceCodester Online Mobile Management Store Users.php unrestricted uploadEPSS 0.8%CVE-2025-4912MEDIUMSourceCodester Student Result Management System Image File update_student.php path traversalEPSS 0.8%CVE-2023-5284MEDIUMSourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadEPSS 0.8%CVE-2024-3362HIGHSourceCodester Online Library System controller.php sql injectionEPSS 0.8%CVE-2024-3361HIGHSourceCodester Online Library System deweydecimal.php sql injectionEPSS 0.8%CVE-2024-4920MEDIUMSourceCodester Online Discussion Forum Site registerH.php unrestricted uploadEPSS 0.8%CVE-2024-1923MEDIUMSourceCodester Simple Student Attendance System List of Classes Page ajax-api.php delete_student sql injectionEPSS 0.8%CVE-2022-2749MEDIUMSourceCodester Gym Management System unrestricted uploadEPSS 0.8%CVE-2023-2596MEDIUMSourceCodester Online Reviewer System GET Parameter user-update.php sql injectionEPSS 0.8%CVE-2023-4179MEDIUMSourceCodester Free Hospital Management System for Small Practices sql injectionEPSS 0.8%