Vulnerabilidades en SourceCodester

2005 resultados
Análisis Vexday

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2022-3581LOWSourceCodester Cashier Queuing System Cashiers Tab cross site scriptingEPSS 0.4%CVE-2024-5097MEDIUMSourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgeryEPSS 0.4%CVE-2022-3580LOWSourceCodester Cashier Queuing System User Creation cross site scriptingEPSS 0.4%CVE-2026-10236MEDIUMSourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorizationEPSS 0.4%CVE-2026-4778MEDIUMSourceCodester Sales and Inventory System HTTP GET Parameter update_category.php sql injectionEPSS 0.4%CVE-2026-4569MEDIUMSourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injectionEPSS 0.4%CVE-2026-4572MEDIUMSourceCodester Sales and Inventory System HTTP POST Request view_product.php sql injectionEPSS 0.4%CVE-2026-3170MEDIUMSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scriptingEPSS 0.4%CVE-2026-4777MEDIUMSourceCodester Sales and Inventory System POST Parameter view_supplier.php sql injectionEPSS 0.4%CVE-2022-3519LOWSourceCodester Sanitization Management System Quote Requests Tab cross site scriptingEPSS 0.4%CVE-2026-4825MEDIUMSourceCodester Sales and Inventory System HTTP GET Parameter update_sales.php sql injectionEPSS 0.4%CVE-2026-4571MEDIUMSourceCodester Sales and Inventory System HTTP POST Request view_payments.php sql injectionEPSS 0.4%CVE-2026-7269MEDIUMSourceCodester Pharmacy Sales and Inventory System index.php cross site scriptingEPSS 0.4%CVE-2026-15532MEDIUMSourceCodester Online Book Store System User Management cross site scriptingEPSS 0.4%CVE-2025-13564MEDIUMSourceCodester Pre-School Management System FilehelperController.php removefile denial of serviceEPSS 0.4%CVE-2026-19904MEDIUMSourceCodester Online Book Store System System Settings index.php site_settings cross site scriptingEPSS 0.4%CVE-2024-7360MEDIUMSourceCodester Tracking Monitoring Management System ajax.php cross-site request forgeryEPSS 0.4%CVE-2026-94016MEDIUMSourceCodester Drug Recommendation System add_symptom cross site scriptingEPSS 0.4%CVE-2025-13267MEDIUMSourceCodester Dental Clinic Appointment Reservation System success.php sql injectionEPSS 0.4%CVE-2026-91005MEDIUMSourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted uploadEPSS 0.4%