Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2025-11487MEDIUMSourceCodester Farm Management System uploadProduct.php sql injectionEPSS 0.4%CVE-2026-8136MEDIUMSourceCodester Pharmacy Sales and Inventory System index.php users cross site scriptingEPSS 0.4%CVE-2025-11405MEDIUMSourceCodester Hotel and Lodge Management System del_tax.php sql injectionEPSS 0.4%CVE-2026-9377MEDIUMSourceCodester SUP Online Shopping productedit.php cross site scriptingEPSS 0.4%CVE-2025-11400MEDIUMSourceCodester Hotel and Lodge Management System del_room.php sql injectionEPSS 0.4%CVE-2025-11403MEDIUMSourceCodester Hotel and Lodge Management System del_booking.php sql injectionEPSS 0.4%CVE-2025-11401MEDIUMSourceCodester Hotel and Lodge Management System save_curr.php sql injectionEPSS 0.4%CVE-2026-7296MEDIUMSourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scriptingEPSS 0.4%CVE-2025-11399MEDIUMSourceCodester Hotel and Lodge Management System save_room.php sql injectionEPSS 0.4%CVE-2025-11404MEDIUMSourceCodester Hotel and Lodge Management System save_tax.php sql injectionEPSS 0.4%CVE-2026-19787MEDIUMSourceCodester Air Cargo Management System Master.php save_cargo_type sql injectionEPSS 0.3%CVE-2026-86280MEDIUMSourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storageEPSS 0.3%CVE-2026-19925MEDIUMSourceCodester Stock Management System Master.php delete_supplier sql injectionEPSS 0.3%CVE-2025-1587MEDIUMSourceCodester Telecom Billing Management System Add New Record main.cpp addrecords buffer overflowEPSS 0.3%CVE-2026-3171MEDIUMSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scriptingEPSS 0.3%CVE-2025-6345MEDIUMSourceCodester My Food Recipe Add Recipe Page add-recipe.php addRecipeModal cross site scriptingEPSS 0.3%CVE-2026-16202MEDIUMSourceCodester Class and Exam Timetabling System CYS.php cross site scriptingEPSS 0.3%CVE-2026-94033MEDIUMSourceCodester Drug Recommendation System User Management add_user cross site scriptingEPSS 0.3%CVE-2026-90695MEDIUMSourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scriptingEPSS 0.3%CVE-2026-90696MEDIUMSourceCodester Inventory Management System Product Management products_handler.php cross site scriptingEPSS 0.3%