Vulnerabilidades em SourceCodester

2.005 resultados
Análise Vexday

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2024-8170MEDIUMSourceCodester Zipped Folder Manager App add-folder.php unrestricted uploadEPSS 0.8%CVE-2023-1985MEDIUMSourceCodester Online Computer and Laptop Store save_brand sql injectionEPSS 0.8%CVE-2023-1987MEDIUMSourceCodester Online Computer and Laptop Store update_order_status sql injectionEPSS 0.8%CVE-2023-1986MEDIUMSourceCodester Online Computer and Laptop Store delete_order sql injectionEPSS 0.8%CVE-2024-3252MEDIUMSourceCodester Internship Portal Management System check_admin.php sql injectionEPSS 0.8%CVE-2023-2363MEDIUMSourceCodester Resort Reservation System view_room.php sql injectionEPSS 0.8%CVE-2023-2151MEDIUMSourceCodester Student Study Center Desk Management System manage_student.php sql injectionEPSS 0.8%CVE-2023-1100MEDIUMSourceCodester Online Catering Reservation System POST Parameter add_message.php sql injectionEPSS 0.8%CVE-2024-7809MEDIUMSourceCodester Online Graduate Tracer System nbproject exposure of information through directory listingEPSS 0.8%CVE-2022-3120HIGHSourceCodester Clinics Patient Management System Login index.php sql injectionEPSS 0.8%CVE-2024-10371MEDIUMSourceCodester Payroll Management System main login buffer overflowEPSS 0.8%CVE-2024-7813MEDIUMSourceCodester Prison Management System Profile Image insufficiently protected credentialsEPSS 0.8%CVE-2023-6310MEDIUMSourceCodester Loan Management System deleteBorrower.php delete_borrower sql injectionEPSS 0.8%CVE-2023-1379MEDIUMSourceCodester Friendly Island Pizza Website and Ordering System POST Parameter addmem.php sql injectionEPSS 0.8%CVE-2023-2672MEDIUMSourceCodester Lost and Found Information System GET Parameter view.php sql injectionEPSS 0.8%CVE-2023-1292MEDIUMSourceCodester Sales Tracker Management System Master.php delete_client sql injectionEPSS 0.8%CVE-2023-1290MEDIUMSourceCodester Sales Tracker Management System view_client.php sql injectionEPSS 0.8%CVE-2023-6312MEDIUMSourceCodester Loan Management System Users Page deleteUser.php delete_user sql injectionEPSS 0.8%CVE-2023-6311MEDIUMSourceCodester Loan Management System Loan Type Page delete_ltype.php delete_ltype sql injectionEPSS 0.8%CVE-2023-1291MEDIUMSourceCodester Sales Tracker Management System manage_client.php sql injectionEPSS 0.8%