Vulnerabilities in SourceCodester

2,005 results
Vexday analysis

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2026-2057MEDIUMSourceCodester Medical Center Portal Management System login.php sql injectionEPSS 0.3%CVE-2022-4233LOWSourceCodester Event Registration System cross site scriptingEPSS 0.3%CVE-2025-5724MEDIUMSourceCodester Student Result Management System Subjects Page subjects cross site scriptingEPSS 0.3%CVE-2025-5725MEDIUMSourceCodester Student Result Management System Grading System Page grading-system cross site scriptingEPSS 0.3%CVE-2025-6477MEDIUMSourceCodester Student Result Management System System Settings Page system cross site scriptingEPSS 0.3%CVE-2025-5723MEDIUMSourceCodester Student Result Management System Classes Page classes cross site scriptingEPSS 0.3%CVE-2025-5722MEDIUMSourceCodester Student Result Management System Add Academic Term terms cross site scriptingEPSS 0.3%CVE-2025-10480MEDIUMSourceCodester Online Student File Management System save_file.php unrestricted uploadEPSS 0.3%CVE-2025-9689MEDIUMSourceCodester Advanced School Management System item_select sql injectionEPSS 0.3%CVE-2024-11743MEDIUMSourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgeryEPSS 0.3%CVE-2025-2606MEDIUMSourceCodester Best Church Management Software soulwinning_crud.php unrestricted uploadEPSS 0.3%CVE-2024-4929MEDIUMSourceCodester Simple Online Bidding System cross-site request forgeryEPSS 0.3%CVE-2025-5721MEDIUMSourceCodester Student Result Management System Profile Setting Page update_profile cross site scriptingEPSS 0.3%CVE-2026-3819MEDIUMSourceCodester Resort Reservation System Reservation Management page cross site scriptingEPSS 0.3%CVE-2026-3766MEDIUMSourceCodester Web-based Pharmacy Product Management System edit-profile.php cross site scriptingEPSS 0.3%CVE-2024-5428MEDIUMSourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgeryEPSS 0.3%CVE-2025-10625MEDIUMSourceCodester Online Exam Form Submission dashboard.php sql injectionEPSS 0.3%CVE-2025-10790MEDIUMSourceCodester Simple Forum Discussion System ajax.php sql injectionEPSS 0.3%CVE-2025-11611MEDIUMSourceCodester Simple Inventory System user.php sql injectionEPSS 0.3%CVE-2025-12853MEDIUMSourceCodester Best House Rental Management System admin_class.php delete_house sql injectionEPSS 0.3%