Vulnerabilidades em SourceCodester

2.005 resultados
Análise Vexday

Com 1.829 CVEs catalogadas e 132 surgidas apenas nos últimos 90 dias, o volume de vulnerabilidades associadas ao SourceCodester reflete um ritmo elevado de descobertas recentes que exige atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, sem registros no CISA KEV, o que pode indicar menor visibilidade dos ativos em ambientes críticos, mas não reduz o risco potencial dado que 143 falhas já possuem PoC pública disponível. O tipo de falha mais comum é CWE-89 (SQL Injection), uma classe de vulnerabilidade com longa tradição de abuso e baixo custo de exploração. A CVE mais perigosa identificada atualmente é CVE-2022-4855, com score EPSS de 0,2646, sugerindo probabilidade não negligenciável de exploração e recomendando priorização imediata em processos de remediação.

CVE-2026-14775MEDIUMSourceCodester Onlne Examination & Learning Management System process_lesson.php unrestricted uploadEPSS 0.4%CVE-2026-14777MEDIUMSourceCodester Onlne Examination & Learning Management System announcements.php unrestricted uploadEPSS 0.4%CVE-2026-14776MEDIUMSourceCodester Onlne Examination & Learning Management System Filename Extension upload_files.php pathinfo unrestricted uploadEPSS 0.4%CVE-2026-9484MEDIUMSourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorizationEPSS 0.4%CVE-2026-90857MEDIUMSourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted uploadEPSS 0.4%CVE-2026-14698MEDIUMSourceCodester Syllabus-Aligned Learning Management and Examination System upload_files.php unrestricted uploadEPSS 0.4%CVE-2026-14725MEDIUMSourceCodester Online Boat Reservation System session expirationEPSS 0.4%CVE-2022-3497LOWSourceCodester Human Resource Management System Master List cross site scriptingEPSS 0.4%CVE-2022-3493LOWSourceCodester Human Resource Management System Add Employee cross site scriptingEPSS 0.4%CVE-2025-12294MEDIUMSourceCodester Point of Sales delete_category.php sql injectionEPSS 0.4%CVE-2023-1689LOWSourceCodester Earnings and Expense Tracker App cross site scriptingEPSS 0.4%CVE-2023-1688LOWSourceCodester Earnings and Expense Tracker App cross site scriptingEPSS 0.4%CVE-2023-1687LOWSourceCodester Simple Task Allocation System cross site scriptingEPSS 0.4%CVE-2023-1690LOWSourceCodester Earnings and Expense Tracker App cross site scriptingEPSS 0.4%CVE-2025-4547MEDIUMSourceCodester Web-based Pharmacy Product Management System Add User Page cross site scriptingEPSS 0.4%CVE-2024-12354MEDIUMSourceCodester Phone Contact Manager System User Menu MenuDisplayStart buffer overflowEPSS 0.4%CVE-2023-5021LOWSourceCodester AC Repair and Services System cross site scriptingEPSS 0.4%CVE-2023-1946LOWSourceCodester Survey Application System Add New cross site scriptingEPSS 0.4%CVE-2023-1507LOWSourceCodester E-Commerce System Category Name controller.php cross site scriptingEPSS 0.4%CVE-2023-0258LOWSourceCodester Online Food Ordering System Category List cross site scriptingEPSS 0.4%