Remyandrade vulnerabilities
77 vulnerabilities
Known vulnerabilities in Remyandrade products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 42 products.
Products
42- Daily Habit Tracker5 vulnerabilities
- Employee Management System5 vulnerabilities
- Student Grades Management System5 vulnerabilities
- Faq Management System4 vulnerabilities
- Accounts Manager App3 vulnerabilities
- Computer Inventory System3 vulnerabilities
- File Manager App3 vulnerabilities
- Modern Image Gallery App3 vulnerabilities
- Sticky Notes App3 vulnerabilities
- User Registration And Login System3 vulnerabilities
- Contact Manager With Export To Vcf2 vulnerabilities
- Crud Without Page Reload\/Refresh2 vulnerabilities
- Food Menu Manager2 vulnerabilities
- Online Food Menu2 vulnerabilities
- School Task Manager2 vulnerabilities
- Testimonial Page Manager2 vulnerabilities
- Todo List In Kanban Board2 vulnerabilities
- Travel Journal Using Php And Mysql With Source Code2 vulnerabilities
- Ai Font Matcher1 vulnerabilities
- Ai Powered To Do List App1 vulnerabilities
- Api Key Manager App1 vulnerabilities
- Barangay Population Monitoring System1 vulnerabilities
- Book Borrower System1 vulnerabilities
- Doctor Appointment System1 vulnerabilities
- Domain Availability Checker1 vulnerabilities
- Electricity Consumption Monitoring Tool1 vulnerabilities
- Event Student Attendance System1 vulnerabilities
- Faq Bot With Ai Assistant1 vulnerabilities
- Flashcard Quiz App1 vulnerabilities
- Login System With Email Verification1 vulnerabilities
- Matching Type Test1 vulnerabilities
- Math Game1 vulnerabilities
- Modern User Account Generator1 vulnerabilities
- Online Quiz System1 vulnerabilities
- Product Inventory With Export To Excel1 vulnerabilities
- Product Management System1 vulnerabilities
- Product Review\/Rating System1 vulnerabilities
- Real Estate Property Listing App1 vulnerabilities
- School Visitor Log E Book1 vulnerabilities
- Website Link Extractor1 vulnerabilities
- Wedding Guest E Book1 vulnerabilities
- Workout Journal App1 vulnerabilities
CVE-2025-63713remyandradematching_type_test
EPSS score0.36%
Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creation feature. The vulnerability exists because the application fails to properly sanitize user-supplied input in test titles and matching pair items before rendering them in the DOM during test execution.CVE-2025-63892remyandradestudent_grades_management_systemEPSS score0.39%
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function create_classroom of the file /classroom.php of the component My Classrooms Management Page. This manipulation of the argument name/description causes stored cross site scripting.CVE-2025-63708remyandradeai_font_matcherEPSS score0.28%
Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows remote attackers to execute arbitrary JavaScript in victims' browsers. The vulnerability occurs in the webfonts API handling mechanism where font family names are not properly sanitized. An attacker can intercept fetch requests to the webfonts endpoint and inject malicious JavaScript payloads through font family names, resulting in session cookie theft, account hijacking, and unauthorized actions performed on behalf of authenticated users. The vulnerability can be exploited by injecting a fetch hook that returns controlled font data containing malicious scripts.CVE-2025-63639remyandradefaq_bot_with_ai_assistantEPSS score0.24%
The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing the conversation.CVE-2025-63638remyandradeai-powered_to-do_list_appEPSS score0.24%
Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" fields when creating a Task, allowing an attacker to inject arbitrary potentially malicious HTML/JavaScript code that executes in the victim's browser upon clicking the "Add Task" button.CVE-2025-63714remyandrademodern_user_account_generatorEPSS score0.28%
Cross-Site Scripting (XSS) vulnerability in SourceCodester User Account Generator 1.0 allows remote attackers to execute arbitrary JavaScript code in the context of the user's browser session via crafted input in the Username Prefix field. The vulnerability exists due to improper sanitization of user-supplied input when rendering generated account data to the DOM, allowing persistent injection of malicious HTML elements that execute when clicked by users.CVE-2025-13349remyandradestudent_grades_management_system+1EPSS score0.28%
A vulnerability has been found in SourceCodester Student Grades Management System 1.0. This issue affects some unknown processing of the file /grades.php of the component Add New Grade Page. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.CVE-2025-1160remyandradeemployee_management_system+1EPSS score0.93%
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2025-1166remyandradefood_menu_manager+1EPSS score0.53%
A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2025-1905remyandradeemployee_management_system+1EPSS score0.35%
A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. This affects an unknown part of the file employee.php. The manipulation of the argument Full Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.CVE-2025-11485remyandradestudent_grades_management_system+1EPSS score0.29%
A vulnerability was determined in SourceCodester Student Grades Management System 1.0. Affected is the function add_user of the file /admin.php of the component Manage Users Page. This manipulation of the argument first_name/last_name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.CVE-2025-26258remyandradeemployee_management_systemEPSS score0.20%
Sourcecodester Employee Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via 'Add Designation.'CVE-2025-14530remyandradereal_estate_property_listing_app+1EPSS score0.46%
A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2025-29719remyandradeemployee_management_systemEPSS score0.29%
SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via the First Name and Address text fields.CVE-2025-57425remyandradefaq_management_systemEPSS score0.29%
A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint.CVE-2025-57117remyandradeemployee_management_systemEPSS score0.34%
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department.CVE-2025-5628remyandradefood_menu_manager+1EPSS score0.34%
A vulnerability, which was classified as problematic, has been found in SourceCodester Food Menu Manager 1.0. Affected by this issue is some unknown functionality of the file /index.php of the component Add Menu Handler. The manipulation of the argument name/description leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.CVE-2025-64070remyandradestudent_grades_management_systemEPSS score0.20%
Sourcecodester Student Grades Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the Add New Subject Description field.CVE-2025-70457remyandrademodern_image_gallery_appEPSS score0.91%
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save process. This allows an unauthenticated attacker to upload arbitrary PHP code by spoofing the MIME type as an image, leading to full system compromise.CVE-2025-70458remyandradedomain_availability_checkerEPSS score0.23%
A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the unsafe innerHTML property to render domain search results.