Skip to content
OpenAdvisories

Vendor

SourceCodester

2,062 known vulnerabilities.

2,062 results · Feed

  • Medium 6.3

    SourceCodester Electronic Medical Records System UPDATE Statement register.php sql injection

    A vulnerability has been found in SourceCodester Electronic Medical Records System and classified as critical. This vulnerability affects unknown code of the file register.php of the component UPDATE Statement Handler. The manipulation of the argument pconsul…

  • Low 3.5

    SourceCodester Wedding Hall Booking System Staff User Profile cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part of the file /whbs/admin/?page=user of the component Staff User Profile. The manipulation of the argument First Name/Las…

  • Low 3.5

    SourceCodester Wedding Hall Booking System Profile Page cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown functionality of the file /whbs/?page=manage_account of the component Profile Page. The manipulation lea…

  • Low 3.5

    SourceCodester Wedding Hall Booking System Booking Form cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknown functionality of the file /whbs/?page=my_bookings of the component Booking Form. The manipulation of the argument R…

  • Low 3.5

    SourceCodester Wedding Hall Booking System Contact Page cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contact_us of the component Contact Page. The manipulation of the argument Message leads to cross s…

  • Medium 6.3

    SourceCodester Expense Management System POST Parameter report.php fetch_report_credit sql injection

    A vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to …

  • Medium 6.3

    SourceCodester Gym Management System sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unknown function. The manipulation of the argument user_pass leads to sql injection. It is possible to launch the attack remotely. The exploit…

  • Low 3.5

    SourceCodester Interview Management System addQuestion.php cross site scripting

    A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input <script>alert(1)</scri…

  • Low 3.5

    SourceCodester Apartment Visitor Management System manage-apartment.php cross site scripting

    A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /manage-apartment.php. The manipulation of the argument Apartment Number with the input…

  • Low 3.5

    SourceCodester Simple Food Ordering System login.php cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Simple Food Ordering System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password with the input "><ScRiPt>alert(1)</sCrIpT> …

  • Low 3.5

    SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Alphaware Simple E-Commerce System. Affected by this issue is some unknown functionality of the file stockin.php. The manipulation of the argument id with the input '"><scr…

  • Low 3.5

    SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Online Student Admission System. Affected by this vulnerability is an unknown functionality of the file edit-profile.php of the component Student User Page. The manipulation with the input …

  • Medium 6.3

    SourceCodester Church Management System login.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR (SELECT 7064 FROM(SELECT COUNT(*),CONCA…

  • Medium 6.3

    SourceCodester Interview Management System viewReport.php sql injection

    A vulnerability was found in SourceCodester Interview Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /viewReport.php. The manipulation of the argument id with the input (UPDATEXML(9729,CONCAT(0x2e,…

  • Medium 6.3

    SourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted upload

    A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System. It has been declared as critical. This vulnerability affects unknown code of the file admin_feature.php of the component Background Management Page. The manipulation leads to unre…

  • Medium 6.3

    SourceCodester Apartment Visitor Management System index.php sql injection

    A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND (SELECT 4955 FROM (SELE…

  • Medium 6.3

    SourceCodester Electronic Medical Records System POST Request sql injection

    A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument user_email leads to sql inje…

  • High 7.3

    SourceCodester Best Fee Management System admin_class.php login sql injection

    A vulnerability was found in SourceCodester Best Fee Management System. It has been rated as critical. Affected by this issue is the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. The attack may b…

  • Medium 6.3

    SourceCodester Garage Management System createUser.php sql injection

    A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an unknown function of the file createUser.php. The manipulation of the argument userName/uemail leads to sql injection. It is possible to la…

  • Medium 6.3

    SourceCodester Garage Management System removeUser.php sql injection

    A vulnerability was found in SourceCodester Garage Management System and classified as critical. This issue affects some unknown processing of the file removeUser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated rem…

  • Medium 6.3

    SourceCodester Loan Management System delete_lplan.php sql injection

    A vulnerability was found in SourceCodester Loan Management System and classified as critical. This issue affects some unknown processing of the file delete_lplan.php. The manipulation of the argument lplan_id leads to sql injection. The attack may be initiat…

  • Medium 6.3

    SourceCodester Simple E-Learning System classroom.php sql injection

    A vulnerability classified as critical was found in SourceCodester Simple E-Learning System. Affected by this vulnerability is an unknown functionality of the file classroom.php. The manipulation of the argument post_id leads to sql injection. The attack can …

  • Medium 6.3

    SourceCodester Multi Language Hotel Management Software sql injection

    A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The…

  • Medium 6.3

    SourceCodester Multi Language Hotel Management Software sql injection

    A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument room_id leads to sql injection. The attack may be initiated remot…

  • Low 3.5

    SourceCodester Online Admission System index.php cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8</h3><script>alert(1)</script> leads to cros…

  • Low 3.5

    SourceCodester Garage Management System edituser.php cross site scripting

    A vulnerability has been found in SourceCodester Garage Management System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edituser.php. The manipulation of the argument id with the input 1\"><ScRiPt>alert(…

  • Medium 5.5

    SourceCodester Online Admission System GET Parameter sql injection

    A vulnerability was found in SourceCodester Online Admission System and classified as critical. This issue affects some unknown processing of the component GET Parameter Handler. The manipulation of the argument eid leads to sql injection. The exploit has bee…

  • Medium 6.3

    SourceCodester Online Admission System POST Parameter sql injection

    A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability affects unknown code of the component POST Parameter Handler. The manipulation of the argument shift leads to sql injection. The attack can…

  • Low 3.5

    SourceCodester Garage Management System createUser.php cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0. Affected is an unknown function of the file /php_action/createUser.php. The manipulation of the argument userName with the input lala<img src="" on…

  • Medium 6.3

    SourceCodester Garage Management System createUser.php access control

    A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /php_action/createUser.php. The manipulation leads to improper access controls. The attack…

  • Medium 6.3

    SourceCodester Garage Management System edituser.php sql injection

    A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of the file /edituser.php. The manipulation of the argument id with the input -2'%20UNION%20select%2011,user(),333,444--+ …

  • Medium 6.3

    SourceCodester Library Management System index.php sql injection

    A vulnerability was found in SourceCodester Library Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /index.php. The manipulation of the argument RollNo with the input admin' AND (SELECT 2625 FROM (SELEC…

  • Medium 6.3

    SourceCodester Library Management System lab.php sql injection

    A vulnerability has been found in SourceCodester Library Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file lab.php. The manipulation of the argument Section with the input 1' UNION ALL SELECT NULL,NULL,NULL,…

  • Medium 6.3

    SourceCodester Simple E-Learning System search.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Simple E-Learning System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument classCode with the input 1'||(SELECT 0x74666264 WHERE 5610=5610 AND …

  • Medium 6.3

    SourceCodester Simple E-Learning System classRoom.php sql injection

    A vulnerability was found in SourceCodester Simple E-Learning System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classRoom.php. The manipulation of the argument classCode with the input 1'||(SELECT 0x6770715a WHE…

  • Medium 6.3

    SourceCodester Garage Management System editbrand.php sql injection

    A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /editbrand.php. The manipulation of the argument id leads to sql injection. The attack may be initiated…

  • High 7.3

    SourceCodester Garage Management System login.php sql injection

    A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input 1@a.com' AND (SELECT 6427 FROM (…

  • Low 3.5

    SourceCodester Simple e-Learning System claire_blake cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Simple e-Learning System 1.0. Affected by this vulnerability is an unknown functionality of the file /vcs/claire_blake. The manipulation of the argument Bio with the input "><script>alert(d…

  • Low 3.5

    SourceCodester Simple Parking Management System category cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Simple Parking Management System 1.0. This affects an unknown part of the file /ci_spms/admin/category. The manipulation of the argument vehicle_type with the input "><script>al…

  • Low 3.5

    SourceCodester Simple Parking Management System cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Parking Management System 1.0. Affected by this issue is some unknown functionality of the file /ci_spms/admin/search/searching/. The manipulation of the argument se…