Skip to content
OpenAdvisories

Vendor

SourceCodester

2,062 known vulnerabilities.

1,181 results · Clear filters · Feed

  • Medium 4.7

    SourceCodester Event Registration System unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB…

  • Medium 4.3
    CVE-2022-3942 Public exploit

    SourceCodester Sanitization Management System cross site scripting

    A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic. This issue affects some unknown processing of the file php-sms/?p=request_quote. The manipulation leads to cross site scripting. The attack may be initia…

  • Medium 4.7

    SourceCodester Sanitization Management System sql injection

    A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=save_quote. The manipulation of the argument id leads to sql injection. It is pos…

  • Medium 5.4

    SourceCodester Train Scheduler App resource injection

    A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /train_scheduler_app/?action=delete. The manipulation of the argument id leads to improper control…

  • Medium 5.0

    SourceCodester Web-Based Student Clearance System edit-admin.php sql injection

    A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. This affects an unknown part of the file Admin/edit-admin.php. The manipulation of the argument id leads to sql injection. It is possible to in…

  • Medium 5.0

    SourceCodester Online Medicine Ordering System sql injection

    A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/view_order. The manipulation of the argument id leads to sql injection. It is possible …

  • Medium 6.3

    SourceCodester eLearning System manage.php sql injection

    A vulnerability classified as critical was found in SourceCodester eLearning System 1.0. This vulnerability affects unknown code of the file /admin/students/manage.php. The manipulation of the argument id leads to sql injection. The attack can be initiated re…

  • Medium 4.3

    SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgery

    A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request …

  • Medium 4.3

    SourceCodester Simple Cold Storage Management System cross-site request forgery

    A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request …

  • Medium 6.3

    SourceCodester Canteen Management System edituser.php sql injection

    A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edituser.php. The manipulation of the argument id leads to sql injection. The attack may be initia…

  • Medium 6.3

    SourceCodester Cashier Queuing System Login Page login.php sql injection

    A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql …

  • Medium 4.7

    SourceCodester Simple Cold Storage Management System Avatar unrestricted upload

    A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csms/admin/?page=user/manage_user of the component Avatar Handler. The manipulatio…

  • Medium 6.3

    SourceCodester Human Resource Management System Admin Panel employeeadd.php access control

    A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical. This issue affects some unknown processing of the file employeeadd.php of the component Admin Panel. The manipulation leads to improper access control…

  • Medium 6.3

    SourceCodester Sanitization Management System sql injection

    A vulnerability was found in SourceCodester Sanitization Management System and classified as critical. This issue affects some unknown processing of the file /php-sms/?p=services/view_service. The manipulation of the argument id leads to sql injection. The at…

  • Medium 6.3

    SourceCodester Human Resource Management System Profile Photo os command injection

    A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the component Profile Photo Handler. The manipulation of the argument parameter leads to os command injection. …

  • Medium 6.3

    SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload

    A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /employeeview.php of the component Image File Handler. The manipulation le…

  • Medium 6.3

    SourceCodester Human Resource Management System getstatecity.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the att…

  • Medium 6.3

    SourceCodester Human Resource Management System city.php sql injection

    A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file city.php. The manipulation of the argument searccity leads to sql injection.…

  • Medium 6.3

    SourceCodester Human Resource Management System city.php sql injection

    A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file city.php. The manipulation of the argument cityedit leads to sql injection. The attac…

  • Medium 6.3

    SourceCodester Human Resource Management System getstatecity.php sql injection

    A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file getstatecity.php. The manipulation of the argument sc leads to sql injection. It is possible to launc…

  • Medium 6.3

    SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload

    A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestri…

  • Medium 5.0

    SourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection

    A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtusern…

  • Medium 6.3

    SourceCodester Food Ordering Management System POST Parameter router.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql inject…

  • Medium 6.3

    SourceCodester Clinics Patient Management System medicine_details.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file medicine_details.php. The manipulation of the argument medicine leads to sql inj…

  • Medium 4.3

    SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery

    A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site r…

  • Medium 6.3

    SourceCodester Simple Task Managing System loginVaLidation.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Simple Task Managing System. This affects an unknown part of the file /loginVaLidation.php. The manipulation of the argument login leads to sql injection. It is possible to initiate the a…

  • Medium 6.3

    SourceCodester Simple and Nice Shopping Cart Script profile.php sql injection

    A vulnerability classified as critical was found in SourceCodester Simple and Nice Shopping Cart Script. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation of the argument mem_id leads to sql injec…

  • Medium 6.3

    SourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload

    A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation leads to unrestricted upload. …

  • Medium 6.3

    SourceCodester Student Management System index.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack re…

  • Medium 6.3

    SourceCodester Guest Management System front.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The at…

  • Medium 4.3

    SourceCodester Guest Management System cleartext storage

    A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is an unknown function. The manipulation leads to cleartext storage of passwords in the database. The identifier of this vulnerability is VDB-2…

  • Medium 6.3

    SourceCodester Zoo Management System apply_vacancy.php unrestricted upload

    A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible…

  • Medium 6.3

    SourceCodester Zoo Management System animals.php sql injection

    A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file /pages/animals.php. The manipulation of the argument class_id leads to sql injection. The attack may be initia…

  • Medium 6.3

    SourceCodester Automated Beer Parlour Billing System Login sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to init…

  • Medium 4.3

    SourceCodester Gym Management System clickjacking

    A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has be…

  • Medium 6.3

    SourceCodester Student Information System view_student.php sql injection

    A vulnerability classified as critical was found in SourceCodester Student Information System. Affected by this vulnerability is an unknown functionality of the file /admin/students/view_student.php. The manipulation of the argument id leads to sql injection.…

  • Medium 6.3

    SourceCodester Gas Agency Management System oneWord.php unrestricted upload

    A vulnerability classified as critical was found in SourceCodester Gas Agency Management System. Affected by this vulnerability is an unknown functionality of the file /gasmark/assets/myimages/oneWord.php. The manipulation of the argument shell leads to unres…

  • Medium 5.4

    SourceCodester Gym Management System delete_user.php denial of service

    A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the file delete_user.php. The manipulation of the argument delete_user leads to denial of service. It is possible to launch th…

  • Medium 6.3

    SourceCodester Library Management System student.php sql injection

    A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can b…

  • Medium 6.3

    SourceCodester Apartment Visitor Management System action-visitor.php sql injection

    A vulnerability was found in SourceCodester Apartment Visitor Management System and classified as critical. Affected by this issue is some unknown functionality of the file action-visitor.php. The manipulation of the argument editid/remark leads to sql inject…