Skip to content
OpenAdvisories

Product · SourceCodester

Client Database Management System

13 known vulnerabilities.

Client Database Management System at a glance

Last 12 months
5
Critical · all time
0
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 1 vulnerability Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 4 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202640
Feb 202600
Jan 202600
Dec 202510
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202520
May 202560
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

13 results · Feed

  • High 7.3

    SourceCodester Client Database Management System superadmin_user_update.php improper authorization

    A vulnerability was determined in SourceCodester Client Database Management System 1.0. The impacted element is an unknown function of the file /superadmin_user_update.php. This manipulation causes improper authorization. The attack can be initiated remotely.…

  • High 7.3

    SourceCodester Client Database Management System Endpoint superadmin_delete_manager.php improper authorization

    A vulnerability has been found in SourceCodester Client Database Management System 1.0/3.1. Impacted is an unknown function of the file /superadmin_delete_manager.php of the component Endpoint. The manipulation of the argument manager_id leads to improper aut…

  • Medium 5.4

    SourceCodester Client Database Management System Endpoint superadmin_user_delete.php improper authorization

    A flaw has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /superadmin_user_delete.php of the component Endpoint. Executing a manipulation of the argument user_id can lead to improper …

  • High 7.3

    SourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorization

    A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetch_manager_details.php of the component Endpoint. This manipulation of the argument manager_id causes improper authorization. The at…

  • Medium 6.3

    SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload

    A flaw has been found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_leads.php of the component Leads Generation Module. Executing manipulation can lead to unrestricted upload. The attack can be launche…

  • High 7.3

    SourceCodester Client Database Management System user_customer_create_order.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /user_customer_create_order.php. The manipulation of the argument user_id leads t…

  • High 7.3
    CVE-2025-5840 Public exploit

    SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_update_customer_order.php. The manipulation of the argument uploaded_file leads to unrestricte…

  • High 7.3

    SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload

    A vulnerability was found in SourceCodester Client Database Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_order_customer_update.php. The manipulation of the argument uploaded_file_cancelled …

  • Medium 4.7

    SourceCodester Client Database Management System superadmin_update_profile.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. Affected by this issue is some unknown functionality of the file /superadmin_update_profile.php. The manipulation of the argument nickna…

  • High 7.3

    SourceCodester Client Database Management System user_proposal_update_order.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_proposal_update_order.php. The manipulation of the argument order_id leads to sql injection. I…

  • High 7.3

    SourceCodester Client Database Management System user_void_transaction.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /user_void_transaction.php. The manipulation of the argument order_id leads to sql injection. It …

  • High 7.3

    SourceCodester Client Database Management System user_delivery_update.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /user_delivery_update.php. The manipulation of the argument uploaded_file_cancell…

  • High 7.3

    SourceCodester Client Database Management System exposure of information through directory listing

    A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotel…