Vulnerabilidades en SourceCodester

2005 resultados
Análisis Vexday

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2025-9476MEDIUMSourceCodester Human Resource Information System editemployee_process.php unrestricted uploadEPSS 0.5%CVE-2026-3401LOWSourceCodester Web-based Pharmacy Product Management System session expirationEPSS 0.5%CVE-2023-0999MEDIUMSourceCodester Sales Tracker Management System cross-site request forgeryEPSS 0.5%CVE-2025-9475MEDIUMSourceCodester Human Resource Information System editemployee_process.php unrestricted uploadEPSS 0.5%CVE-2023-0946MEDIUMSourceCodester Best POS Management System sql injectionEPSS 0.5%CVE-2023-3619MEDIUMSourceCodester AC Repair and Services System HTTP POST Request sql injectionEPSS 0.5%CVE-2023-3679MEDIUMSourceCodester Lost and Found Information System HTTP POST Request sql injectionEPSS 0.5%CVE-2023-0256MEDIUMSourceCodester Online Food Ordering System Login Page sql injectionEPSS 0.5%CVE-2023-1735MEDIUMSourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injectionEPSS 0.5%CVE-2023-1738MEDIUMSourceCodester Young Entrepreneur E-Negosyo System sql injectionEPSS 0.5%CVE-2023-3850MEDIUMSourceCodester Lost and Found Information System HTTP POST Request sql injectionEPSS 0.5%CVE-2023-3680MEDIUMSourceCodester Lost and Found Information System HTTP POST Request sql injectionEPSS 0.5%CVE-2023-3644MEDIUMSourceCodester Service Provider Management System sql injectionEPSS 0.5%CVE-2024-9298MEDIUMSourceCodester Online Railway Reservation System Ticket ?page=tickets access controlEPSS 0.5%CVE-2023-1569LOWSourceCodester E-Commerce System cross site scriptingEPSS 0.5%CVE-2026-3751MEDIUMSourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injectionEPSS 0.5%CVE-2026-3752MEDIUMSourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injectionEPSS 0.5%CVE-2023-1566MEDIUMSourceCodester Medical Certificate Generator App action.php sql injectionEPSS 0.5%CVE-2024-5365MEDIUMSourceCodester Best House Rental Management System manage_payment.php sql injectionEPSS 0.5%CVE-2024-5100MEDIUMSourceCodester Simple Inventory System tableedit.php sql injectionEPSS 0.5%