Skip to content
OpenAdvisories

Vendor

SourceCodester

2,062 known vulnerabilities.

1,181 results · Clear filters · Feed

  • Medium 6.3

    SourceCodester Simple Online Book Store System bookPerPub.php sql injection

    A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability is an unknown functionality of the file /obs/bookPerPub.php. The manipulation of the argument bookisbn leads to sql inj…

  • Medium 6.3

    SourceCodester Simple Online Book Store System book.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown function of the file /obs/book.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to laun…

  • Medium 6.3

    SourceCodester Company Website CMS settings improper authentication

    A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack ca…

  • Medium 6.3

    SourceCodester Company Website CMS add-portfolio.php unrestricted upload

    A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/add-portfolio.php. The manipulation of the argument ufile leads to unrestricted upload. The…

  • Medium 6.3

    SourceCodester Company Website CMS Add Service add-service.php unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Company Website CMS. Affected is an unknown function of the file /dashboard/add-service.php of the component Add Service Handler. The manipulation leads to unrestricted upload. It …

  • Medium 4.7

    SourceCodester Gym Management System unrestricted upload

    A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/index.php?view_exercises. The manipulation leads to unrestricted upload. T…

  • Medium 6.3

    SourceCodester Simple Online Book Store book.php sql injection

    A vulnerability was found in SourceCodester Simple Online Book Store and classified as critical. This issue affects some unknown processing of the file book.php. The manipulation of the argument book_isbn leads to sql injection. The attack may be initiated re…

  • Medium 6.3

    SourceCodester Simple Online Book Store System Admin_ add.php unrestricted upload

    A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. This vulnerability affects unknown code of the file Admin_ add.php. The manipulation leads to unrestricted upload. The attack can be initiated remotel…

  • Medium 6.3

    SourceCodester Gym Management System Add New Trainer add_trainers.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file /admin/add_trainers.php of the component Add New Trainer. The manipulation of the argument trainer_name leads to sql…

  • Medium 6.3

    SourceCodester Gym Management System Background Management add_exercises.php unrestricted upload

    A vulnerability, which was classified as critical, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality of the file /admin/add_exercises.php of the component Background Management. The manipulation of th…

  • Medium 6.3

    SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload

    A vulnerability was found in SourceCodester Company Website CMS. It has been declared as critical. This vulnerability affects unknown code of the file /dashboard/add-blog.php of the component Add Blog. The manipulation of the argument ufile leads to unrestric…

  • Medium 6.3

    SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload

    A vulnerability was found in SourceCodester Company Website CMS. It has been classified as critical. This affects an unknown part of the file /dashboard/updatelogo.php of the component Background Upload Logo Icon. The manipulation of the argument xfile/ufile …

  • Medium 6.3

    SourceCodester Gym Management System index.php sql injection

    A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /mygym/admin/index.php. The manipulation of the argument edit_tran leads to sql injection. The a…

  • Medium 6.3

    SourceCodester Gym Management System login.php sql injection

    A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument admin_email/admin_pass leads t…

  • Medium 6.3

    SourceCodester Employee Management System aprocess.php sql injection

    A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injec…

  • Medium 6.3

    SourceCodester Employee Management System eprocess.php sql injection

    A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible …

  • Medium 6.3

    SourceCodester Simple Student Information System manage_course.php sql injection

    A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file manage_course.php. The manipulation of the argument id leads to sql injection. The attack may be i…

  • Medium 6.3

    SourceCodester Employee Management System eloginwel.php sql injection

    A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated …

  • Medium 5.5

    SourceCodester Gym Management System login.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument user_login with the input 123@xx.com' OR (SELECT 9084 FROM(SELECT COUNT(…

  • Medium 6.3

    SourceCodester Online Class and Exam Scheduling System faculty_sched.php sql injection

    A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/faculty_sched.php. The manipulation of the argument faculty with the …

  • Medium 6.3

    SourceCodester Online Class and Exam Scheduling System class_sched.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/class_sched.php. The manipulation of the argument class with the input '||(SELECT 0x684d6b6…

  • Medium 6.3

    SourceCodester Simple Student Information System manage_department.php sql injection

    A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/manage_department.php. The manipulation of the argument id with the input -5…

  • Medium 4.3

    SourceCodester Simple E-Learning System downloadFiles.php information disclosure

    A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The at…

  • Medium 6.3

    SourceCodester Gym Management System Exercises Module sql injection

    A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises Module. The manipulation of the argument exer leads to sql injection. It is possible to initiate the…

  • Medium 4.7

    SourceCodester Gym Management System GET Parameter sql injection

    A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument day leads to sql injection. It is possible to initiate the att…

  • Medium 6.3

    SourceCodester Simple E-Learning System claire_blake sql injection

    A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /claire_blake. The manipulation of the argument phoneNumber leads to sql injection. The attac…

  • Medium 6.3

    SourceCodester Simple E-Learning System search.php sql injection

    A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument searchPost leads to sql injection. The …

  • Medium 6.3

    SourceCodester Simple E-Learning System comment_frame.php sql injection

    A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an unknown function of the file comment_frame.php. The manipulation of the argument post_id leads to sql injection. It is possible to launch …

  • Medium 6.3

    SourceCodester Company Website CMS unrestricted upload

    A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unknown processing. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the …

  • Medium 6.3

    SourceCodester Electronic Medical Records System UPDATE Statement register.php sql injection

    A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unknown code of the file register.php of the component UPDATE Statement Handler. The manipulation of the argument pconsul…

  • Medium 6.3

    SourceCodester Expense Management System POST Parameter report.php fetch_report_credit sql injection

    A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to …

  • Medium 6.3

    SourceCodester Gym Management System sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unknown function. The manipulation of the argument user_pass leads to sql injection. It is possible to launch the attack remotely. The exploit…

  • Medium 6.3

    SourceCodester Church Management System login.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(*),CONCA…

  • Medium 6.3

    SourceCodester Interview Management System viewReport.php sql injection

    A vulnerability was found in SourceCodester Interview Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /viewReport.php. The manipulation of the argument id with the input (UPDATEXML(9729,CONCAT(0x2e,…

  • Medium 6.3

    SourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted upload

    A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects unknown code of the file admin_feature.php of the component Background Management Page. The manipulation leads to unre…

  • Medium 6.3

    SourceCodester Apartment Visitor Management System index.php sql injection

    A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND (SELECT 4955 FROM (SELE…

  • Medium 6.3

    SourceCodester Electronic Medical Records System POST Request sql injection

    A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument user_email leads to sql inje…

  • Medium 6.3

    SourceCodester Garage Management System createUser.php sql injection

    A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an unknown function of the file createUser.php. The manipulation of the argument userName/uemail leads to sql injection. It is possible to la…

  • Medium 6.3

    SourceCodester Garage Management System removeUser.php sql injection

    A vulnerability was found in SourceCodester Garage Management System and classified as critical. This issue affects some unknown processing of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated rem…

  • Medium 6.3

    SourceCodester Loan Management System delete_lplan.php sql injection

    A vulnerability was found in SourceCodester Loan Management System and classified as critical. This issue affects some unknown processing of the file delete_lplan.php. The manipulation of the argument lplan_id leads to sql injection. The attack may be initiat…