Skip to content
OpenAdvisories

Vendor

SourceCodester

2,062 known vulnerabilities.

1,181 results · Clear filters · Feed

  • Medium 6.3

    SourceCodester Simple E-Learning System classroom.php sql injection

    A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerability is an unknown functionality of the file classroom.php. The manipulation of the argument post_id leads to sql injection. The attack can …

  • Medium 6.3

    SourceCodester Multi Language Hotel Management Software sql injection

    A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The…

  • Medium 6.3

    SourceCodester Multi Language Hotel Management Software sql injection

    A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument room_id leads to sql injection. The attack may be initiated remot…

  • Medium 5.5

    SourceCodester Online Admission System GET Parameter sql injection

    A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some unknown processing of the component GET Parameter Handler. The manipulation of the argument eid leads to sql injection. The exploit has bee…

  • Medium 6.3

    SourceCodester Online Admission System POST Parameter sql injection

    A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability affects unknown code of the component POST Parameter Handler. The manipulation of the argument shift leads to sql injection. The attack can…

  • Medium 6.3

    SourceCodester Garage Management System createUser.php access control

    A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /php_action/createUser.php. The manipulation leads to improper access controls. The attack…

  • Medium 6.3

    SourceCodester Garage Management System edituser.php sql injection

    A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument id with the input -2'%20UNION%20select%2011,user(),333,444--+ …

  • Medium 6.3

    SourceCodester Library Management System index.php sql injection

    A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND (SELECT 2625 FROM (SELEC…

  • Medium 6.3

    SourceCodester Library Management System lab.php sql injection

    A vulnerability has been found in SourceCodester Library Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file lab.php. The manipulation of the argument Section with the input 1' UNION ALL SELECT NULL,NULL,NULL,…

  • Medium 6.3

    SourceCodester Simple E-Learning System search.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Simple E-Learning System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument classCode with the input 1'||(SELECT 0x74666264 WHERE 5610=5610 AND …

  • Medium 6.3

    SourceCodester Simple E-Learning System classRoom.php sql injection

    A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||(SELECT 0x6770715a WHE…

  • Medium 6.3

    SourceCodester Garage Management System editbrand.php sql injection

    A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /editbrand.php. The manipulation of the argument id leads to sql injection. The attack may be initiated…

  • Medium 6.3
    CVE-2022-2297 Public exploit

    SourceCodester Clinics Patient Management System unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_picture with the input <…

  • Medium 4.3

    SourceCodester Hotel Management System Search search cross site scripting

    A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /ci_hms/search of the component Search. The manipulation of the argument search with the input ">…

  • Medium 6.3

    SourceCodester Library Management System bookdetails.php sql injection

    A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. The manipulation of the argument id with the input ' AND (SE…

  • Medium 6.3

    SourceCodester Library Management System /card/index.php unrestricted upload

    A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possibl…

  • Medium 6.3
    CVE-2022-2086 EPSS 20%

    SourceCodester Bank Management System login.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep(10),3,4,5 --+ leads to…

  • Medium 4.7

    SourceCodester Prison Management System Inmate sql injection

    A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. Affected is an unknown function of the file /admin/?page=inmates/view_inmate of the component Inmate Handler. The manipulation of the argument id with the in…

  • Medium 4.7

    SourceCodester Prison Management System Visit view_visit.php sql injection

    A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /pms/admin/visits/view_visit.php of the component Visit Handler. The manipulation of the argument i…

  • Medium 4.3

    SourceCodester Microfinance Management System addcustomerHandler.php cross site scripting

    A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname le…

  • Medium 4.3

    SourceCodester One Church Management System churchprofile.php cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.