CveMateVulnerability intelligence

Sourcecodester vulnerabilities

2,050 vulnerabilities

Known vulnerabilities in Sourcecodester products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 418 products.

Products

50 of 418

Class And Exam Timetabling System60 vulnerabilities
Best Salon Management System33 vulnerabilities
Online Computer And Laptop Store30 vulnerabilities
Pharmacy Sales And Inventory System30 vulnerabilities
Online Eyewear Shop29 vulnerabilities
Best House Rental Management System27 vulnerabilities
Pet Grooming Management Software26 vulnerabilities
Pizzafy Ecommerce System25 vulnerabilities
Online Tours & Travels Management System24 vulnerabilities
Inventory Management System22 vulnerabilities
Kortex Lite Advocate Office Management System22 vulnerabilities
Sales And Inventory System21 vulnerabilities
Clinics Patient Management System20 vulnerabilities
Web Based Pharmacy Product Management System20 vulnerabilities
Prison Management System19 vulnerabilities
Record Management System19 vulnerabilities
Employee Management System18 vulnerabilities
Lost And Found Information System18 vulnerabilities
Student Result Management System18 vulnerabilities
Drug Recommendation System17 vulnerabilities
Employee Task Management System17 vulnerabilities
Engineers Online Portal17 vulnerabilities
Simple Online Bidding System17 vulnerabilities
AC Repair And Services System16 vulnerabilities
Food Ordering Management System16 vulnerabilities
Online Graduate Tracer System16 vulnerabilities
Online Reviewer Management System16 vulnerabilities
Computer Laboratory Management System15 vulnerabilities
Hotel And Lodge Management System15 vulnerabilities
Online Food Ordering System15 vulnerabilities
Canteen Management System14 vulnerabilities
Gym Management System14 vulnerabilities
Human Resource Management System14 vulnerabilities
Online Courseware14 vulnerabilities
Car Driving School Management System13 vulnerabilities
Client Database Management System13 vulnerabilities
Employee And Visitor Gate Pass Logging System13 vulnerabilities
Patients Waiting Area Queue Management System13 vulnerabilities
Simple Online Food Ordering System13 vulnerabilities
Stock Management System13 vulnerabilities
Company Website CMS12 vulnerabilities
Doctors Appointment System12 vulnerabilities
Music Gallery Site12 vulnerabilities
Online Discussion Forum Site12 vulnerabilities
Online Pizza Ordering System12 vulnerabilities
Service Provider Management System12 vulnerabilities
Simple Realtime Quiz System12 vulnerabilities
Student Study Center Desk Management System12 vulnerabilities
Apartment Visitor Management System11 vulnerabilities
Aplaya Beach Resort Online Reservation System11 vulnerabilities

CVE-2026-112096sourcecodesterinventory system11h ago19-10-2026 08:30

A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of the argument Product_Name/Product_Code/Vendor_Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2026-112095sourcecodesterinventory system11h ago19-10-2026 08:15

A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the component Product Management. Executing a manipulation of the argument Product_Id/Product_Name can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used.CVE-2026-112097sourcecodesterinventory system11h ago19-10-2026 08:45

A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the argument Hsn_Code results in cross site scripting. It is possible to launch the attack remotely.CVE-2026-109605sourcecodestersimple cafe billing system6d ago13-10-2026 15:45

A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.CVE-2026-109607sourcecodesteronline exam system6d ago13-10-2026 16:15

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.CVE-2026-109606sourcecodesterart gallery management system6d ago13-10-2026 16:00

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.CVE-2026-109620sourcecodesteronline reviewer system6d ago13-10-2026 16:30

A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.CVE-2026-108972sourcecodesterhuman resource management system6d ago13-10-2026 06:00

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authentication. It is possible to launch the attack remotely. The exploit has been made public and could be used.CVE-2026-108974sourcecodestere-learning system6d ago13-10-2026 06:30

A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be launched remotely. The exploit is publicly available and might be used.CVE-2026-108973sourcecodestercontact tracing system6d ago13-10-2026 06:15

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.CVE-2026-108975sourcecodesterlibrary management system6d ago13-10-2026 06:45

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.CVE-2026-108964sourcecodesterperformance indicator system6d ago13-10-2026 03:45

A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.CVE-2026-108965sourcecodesterperformance indicator system6d ago13-10-2026 04:00

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.CVE-2026-108967sourcecodesterperformance indicator system6d ago13-10-2026 04:30

A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.CVE-2026-108919sourcecodesterdrug recommendation system7d ago12-10-2026 18:15

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Student Registration. This manipulation of the argument txtname/txtpassword/txtemail/txtphone/txtprevious_school causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.CVE-2026-108920sourcecodesterdrug recommendation system7d ago12-10-2026 18:30

A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user_record.php of the component Admin Record Tables. Such manipulation of the argument name/email leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.CVE-2026-108966sourcecodesterperformance indicator system6d ago13-10-2026 04:15

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.CVE-2026-108968sourcecodesterperformance indicator system6d ago13-10-2026 05:00

A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.CVE-2021-41728sourcecodesternews247_cms4y ago28-10-2021 14:37

Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles.CVE-2025-2604mayurikadvocate_office_management_system+11y ago21-03-2025 20:31

A vulnerability was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. It has been classified as critical. Affected is an unknown function of the file edit_act.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.