Skip to content
OpenAdvisories

Vendor

SourceCodester

2,062 known vulnerabilities.

2,062 results · Feed

  • Medium 6.3

    SourceCodester Student Grading System update_account.php sql injection

    A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit …

  • Medium 6.3

    SourceCodester Student Grading System form137.php sql injection

    A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now pub…

  • Medium 6.3

    SourceCodester Student Grading System del_promote.php sql injection

    A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /del_promote.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched…

  • Medium 6.3

    SourceCodester Student Grading System view_students.php sql injection

    A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remo…

  • Medium 6.3

    SourceCodester Link Status Checker index.php server-side request forgery

    A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument proxy leads to server-side request forgery. The attack may be initiated remot…

  • Medium 6.3

    SourceCodester Student Grading System rms.php sql injection

    A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead to sql injection. The attack can be launched remotely. The exploit…

  • Medium 6.3

    SourceCodester Student Grading System edit_user.php sql injection

    A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated…

  • Medium 6.3

    SourceCodester Student Grading System view_user.php sql injection

    A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attac…

  • Medium 6.3

    SourceCodester Food Ordering Management System ticket-message.php sql injection

    A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticket_id leads to sql injection. The attack may be la…

  • High 7.3

    SourceCodester Pet Grooming Management Software edit_role.php sql injection

    A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_role.php. Executing manipulation of the argument ID can lead to sql injection. It is possible t…

  • Low 3.5

    SourceCodester Simple To-Do List System Add New Task fetch_tasks.php cross site scripting

    A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input <script>alert('XSS')</script> can lead to cross si…

  • High 7.3

    SourceCodester Simple Forum Discussion System admin_class.php sql injection

    A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /admin_class.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiat…

  • Low 3.5

    SourceCodester Time Tracker index.html cross site scripting

    A vulnerability was detected in SourceCodester Time Tracker 1.0. The affected element is an unknown function of the file /index.html. Performing manipulation of the argument project-name results in cross site scripting. The attack may be initiated remotely. T…

  • Medium 4.7

    SourceCodester Pet Grooming Management Software profit_report.php sql injection

    A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/profit_report.php. Such manipulation of the argument product_id leads to sql injection. The attack can be lau…

  • Medium 6.3

    SourceCodester Pet Grooming Management Software manage_website.php unrestricted upload

    A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file manage_website.php. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. …

  • Medium 6.3

    SourceCodester Pet Grooming Management Software profile.php unrestricted upload

    A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/profile.php. Executing manipulation can lead to unrestricted upload. The attack may be performed fro…

  • High 7.3

    SourceCodester Online Polling System manage-admins.php sql injection

    A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The exploit …

  • Medium 4.7

    SourceCodester Pet Management System profile.php unrestricted upload

    A flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument website_image causes unrestricted upload. Remote exploitation of the attack is possible. The …

  • High 7.3

    SourceCodester Online Polling System candidates.php sql injection

    A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. Th…

  • High 7.3

    SourceCodester Online Polling System registeracc.php sql injection

    A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exp…

  • High 7.3

    SourceCodester Online Polling System manage-profile.php sql injection

    A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has b…

  • Low 3.5

    SourceCodester Online Polling System manage-profile.php cross site scripting

    A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launche…

  • High 7.3

    SourceCodester Online Farm Management System login.php sql injection

    A vulnerability was detected in SourceCodester Online Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/login.php. Performing manipulation of the argument uname results in sql injection. It is possible t…

  • High 7.3

    SourceCodester Food Ordering Management System register-router.php sql injection

    A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the file /routers/register-router.php. Such manipulation of the argument phone leads to sql injection. The attack may be perfo…

  • High 7.3

    SourceCodester Hotel Reservation System updateabout.php sql injection

    A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The ex…

  • High 7.3

    SourceCodester Online Hotel Reservation System edituser.php sql injection

    A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. Affected by this issue is some unknown functionality of the file /admin/edituser.php. The manipulation of the argument userid leads to sql injection. The attack may be initi…

  • High 7.3

    SourceCodester/Campcodes School Log Management System admin_class.php sql injection

    A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_class.php. Executing manipulation of the argument id_no can lead to sql injection.…

  • High 7.3

    SourceCodester Eye Clinic Management System search_index_Diagnosis.php sql injection

    A security vulnerability has been detected in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file /main/search_index_Diagnosis.php. Such manipulation of the argument Search leads to sql injection. …

  • High 7.3

    Campcodes/SourceCodester Courier Management System ajax.php signup sql injection

    A security flaw has been discovered in Campcodes/SourceCodester Courier Management System 1.0. Affected by this issue is the function Signup of the file /ajax.php. Performing manipulation of the argument lastname results in sql injection. It is possible to in…

  • High 7.3

    Campcodes/SourceCodester Courier Management System ajax.php login sql injection

    A vulnerability was determined in Campcodes/SourceCodester Courier Management System 1.0. Affected is the function Login of the file /ajax.php. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. Th…

  • High 7.3

    SourceCodester Water Billing System edit.php sql injection

    A security vulnerability has been detected in SourceCodester Water Billing System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed re…

  • High 7.3

    SourceCodester Water Billing System paybill.php sql injection

    A weakness has been identified in SourceCodester Water Billing System 1.0. Affected is an unknown function of the file /paybill.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been…

  • High 7.3

    SourceCodester Water Billing System viewbill.php sql injection

    A security flaw has been discovered in SourceCodester Water Billing System 1.0. This impacts an unknown function of the file /viewbill.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been…

  • High 7.3

    SourceCodester Simple Cafe Billing System sales_report.php sql injection

    A vulnerability was identified in SourceCodester Simple Cafe Billing System 1.0. This affects an unknown function of the file /sales_report.php. The manipulation of the argument month leads to sql injection. The attack may be initiated remotely. The exploit i…

  • High 7.3

    SourceCodester Simple Cafe Billing System receipt.php sql injection

    A vulnerability was determined in SourceCodester Simple Cafe Billing System 1.0. The impacted element is an unknown function of the file /receipt.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. Th…

  • High 7.3

    SourceCodester Online Book Store publisher_list.php sql injection

    A flaw has been found in SourceCodester Online Book Store 1.0. This issue affects some unknown processing of the file /publisher_list.php. This manipulation of the argument pubid causes sql injection. It is possible to initiate the attack remotely. The exploi…

  • High 7.3

    SourceCodester Online Polling System Code checklogin.php sql injection

    A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a …

  • Medium 6.3

    SourceCodester Advanced School Management System vendordetails sql injection

    A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The ex…

  • Medium 6.3

    SourceCodester Advanced School Management System item_select sql injection

    A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The manipulation of the argument q results in sql injection. It is possible to launch t…

  • High 7.3

    SourceCodester Bakeshop Online Ordering System passwordrecover.php sql injection

    A vulnerability was found in SourceCodester Bakeshop Online Ordering System 1.0. The impacted element is an unknown function of the file /passwordrecover.php. Performing manipulation of the argument phonenumber results in sql injection. The attack is possible…