Vendor
SourceCodester
2,062 known vulnerabilities.
Products
2,062 results · Feed
-
Medium 6.3
SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload
A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unre…
-
High 7.3
SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper priv…
-
High 7.3
SourceCodester/katojkalemba Online Food Ordering System order.php sql injection
A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The ex…
-
High 7.3
SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection
A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.php. The manipulation of the argument ID results in sql injection. It is possible t…
-
High 7.3
SourceCodester College Notes Gallery Management System login.php sql injection
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /College/login.php. The manipulation of the argument User leads to sql injection. …
-
Medium 4.3
SourceCodester Inventory Management System invoice.php authorization
A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization bypass. It is possible to initiate the attack remotely. The expl…
-
Low 3.5
SourceCodester Inventory Management System Product Management products_handler.php cross site scripting
A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products_handler.php of the component Product Management Module. Executing a manipulation of the argument P…
-
Low 3.5
SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting
A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors_handler.php of the component Vendor Management. Performing a manipulation results in cross site sc…
-
Low 3.5
SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting
A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers_handler.php of the component Customer Management Module. Such manipulation of the argument Customer_Name leads to cros…
-
Medium 4.3
SourceCodester Class and Exam Timetabling System subject1.php cross site scripting
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulation of the argument subject leads to cross site scripting. The attack can be executed rem…
-
High 7.3
SourceCodester School Registration and Fee System save_class.php sql injection
A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save_class.php. The manipulation of the argument Category leads to sql injection. Remote exploitation of t…
-
High 7.3
SourceCodester School Registration and Fee System pay_report.php sql injection
A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay_report.php. Performing a manipulation of the argument period results in sql injection. The attack can…
-
High 7.3
SourceCodester School Registration and Fee System delete_stud.php sql injection
A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/delete_stud.php. Executing a manipulation of the argument selector[] can lead to sql injection. The …
-
High 7.3
SourceCodester School Registration and Fee System save_stud.php sql injection
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the att…
-
High 7.3
SourceCodester Class and Exam Timetabling System delete_subject.php sql injection
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /delete_subject.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the…
-
Medium 4.3
SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting
A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this issue is some unknown functionality of the file save-settings.php of the component Settings Update Endpoint. The manipulation of the argument site_name/site_d…
-
Medium 6.5
SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication
A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missi…
-
High 7.3
SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication
A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. Th…
-
High 7.3
SourceCodester Online Voting System ajax.php save_category sql injection
A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=save_category. This manipulation of the argument Category causes sql injection. The attack can be initiated remotel…
-
Medium 4.3
SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery
A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The e…
-
Medium 5.3
SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible…
-
Medium 6.3
SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is …
-
Medium 4.3
SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting
A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The affected element is an unknown function of the file manage_subjects.php. The manipulation of the argument msg/title/content results in cross site sc…
-
High 7.3
SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possi…
-
High 7.3
SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials
A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This issue affects some unknown processing of the file db.php. Executing a manipulation can lead to hard-coded credentials. The attack can be executed remot…
-
Medium 5.3
SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege m…
-
High 7.3
SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injection
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is the function mysqli_query of the file /admin/modal_add_room.php. The manipulation of the argument room_name leads to sql injection. The a…
-
High 7.3
SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected is the function mysqli_query of the file /admin/modal_add_product.php. Executing a manipulation of the argument fname can lead to sql injection. The attack can be…
-
High 7.3
SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This impacts the function mysqli_query of the file /admin/modal_add_coursea.php. Performing a manipulation of the argument course results in sql injection. Remote exploitation …
-
High 7.3
SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. This affects the function mysqli_query of the file /admin/modal_add_course2.php. Such manipulation of the argument course leads to sql injection. The attack may be launche…
-
High 7.3
SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection
A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is the function mysqli_query of the file /admin/modal_add_course1.php. This manipulation of the argument course causes sql injection. The attack may be initiat…
-
High 7.3
SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection
A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. The affected element is the function mysqli_query of the file /admin/modal_add_course.php. The manipulation of the argument course results in sql injection. The attack can b…
-
High 7.3
SourceCodester Class and Exam Timetabling System delete_user_account.php sql injection
A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /delete_user_account.php. Such manipulation of the argument ID leads to sql injection. T…
-
High 7.3
SourceCodester Class and Exam Timetabling System delete_user.php sql injection
A weakness has been identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /delete_user.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit …
-
High 7.3
SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete_teacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. T…
-
High 7.3
SourceCodester Online Voting System ajax.php login sql injection
A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. T…
-
High 7.3
SourceCodester Online Voting System ajax.php delete_category sql injection
A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_category. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the a…
-
High 7.3
SourceCodester Online Voting System ajax.php delete_voting sql injection
A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete_voting. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely…
-
High 7.3
SourceCodester Online Voting System ajax.php save_user sql injection
A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_user. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been pub…
-
High 7.3
SourceCodester Class and Exam Timetabling System session.php authorization
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be execut…