Skip to content
OpenAdvisories

Vendor

SourceCodester

2,055 known vulnerabilities.

7 results · Clear filters · Feed

  • High 7.3
    CVE-2026-7228 Public exploit

    SourceCodester Pizzafy Ecommerce System ajax.php get_cart_count sql injection

    A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count. This manipulation of the argument ID causes sql injection. The attack is possible to b…

  • High 7.3
    CVE-2025-5840 Public exploit

    SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_update_customer_order.php. The manipulation of the argument uploaded_file leads to unrestricte…

  • High 7.3
    CVE-2025-5755 Public exploit

    SourceCodester Open Source Clinic Management System email_config.php sql injection

    A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /email_config.php. The manipulation of the argument email leads to sql injection. It is possi…

  • High 7.3
    CVE-2024-6043 Public exploit

    SourceCodester Best House Rental Management System admin_class.php login sql injection

    A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to i…

  • High 7.3
    CVE-2023-2594 Public exploit

    SourceCodester Food Ordering Management System Registration sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible…

  • High 7.3
    CVE-2023-0963 Public exploit

    SourceCodester Music Gallery Site POST Request Users.php access control

    A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper access controls. The …

  • High 7.3
    CVE-2023-0905 Public exploit

    SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication

    A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch…