VYPR

Vendor CVEs

Sourcecodester

All CVEs

2,578 total · sorted by risk
  • CVE-2023-4439MedAug 20, 2023
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Minus Value Handler. The manipulation leads to improper validation of specified quantity in input.…

  • CVE-2023-4183MedAug 6, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file edit_update.php of the component Password Handler. The manipulation of the argument user_id leads to improper…

  • CVE-2023-2364MedApr 28, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability, which was classified as problematic, was found in SourceCodester Resort Reservation System 1.0. Affected is an unknown function of the file registration.php. The manipulation of the argument fullname leads to cross site scripting. It is possible to launch the…

  • CVE-2023-1858MedApr 5, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to initiate the…

  • CVE-2023-1790MedApr 1, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to launch the attack…

  • CVE-2023-1769MedMar 31, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base64-encode/resource=g…

  • CVE-2023-1036MedFeb 26, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of the argument…

  • CVE-2023-0999MedFeb 24, 2023
    risk 0.28cvss 4.3epss 0.00

    A vulnerability classified as problematic was found in SourceCodester Sales Tracker Management System 1.0. This vulnerability affects unknown code of the file admin/?page=user/list. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The…

  • CVE-2023-0988MedFeb 23, 2023
    risk 0.28cvss 4.3epss 0.00

    A vulnerability, which was classified as problematic, has been found in SourceCodester Online Pizza Ordering System 1.0. This issue affects some unknown processing of the file admin/ajax.php?action=save_user. The manipulation leads to cross-site request forgery. The attack may…

  • CVE-2022-1102MedJan 7, 2023
    risk 0.28cvss 4.3epss 0.01

    A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royal_event/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to…

  • CVE-2022-4738MedDec 25, 2022
    risk 0.28cvss 4.3epss 0.00

    A vulnerability classified as problematic has been found in SourceCodester Blood Bank Management System 1.0. Affected is an unknown function of the file index.php?page=users of the component User Registration Handler. The manipulation of the argument Name leads to cross site…

  • CVE-2022-3942MedNov 11, 2022
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic. This issue affects some unknown processing of the file php-sms/?p=request_quote. The manipulation leads to cross site scripting. The attack may be initiated remotely. The…

  • CVE-2022-3585MedOct 18, 2022
    risk 0.28cvss 4.3epss 0.00

    A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the component Contact Us. The manipulation leads to cross-site request forgery. It is…

  • CVE-2022-3582MedOct 18, 2022
    risk 0.28cvss 4.3epss 0.00

    A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument change password leads to cross-site request forgery. The attack…

  • CVE-2022-3121MedSep 5, 2022
    risk 0.28cvss 4.3epss 0.00

    A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The…

  • CVE-2022-2813MedAug 15, 2022
    risk 0.28cvss 4.3epss 0.00

    A vulnerability, which was classified as problematic, was found in SourceCodester Guest Management System. Affected is an unknown function. The manipulation leads to cleartext storage of passwords in the database. The identifier of this vulnerability is VDB-206400.

  • CVE-2022-2800MedAug 12, 2022
    risk 0.28cvss 4.3epss 0.01

    A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has been disclosed to the…

  • CVE-2022-2704MedAug 8, 2022
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The attack can be…

  • CVE-2022-2291MedJul 12, 2022
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in SourceCodester Hotel Management System 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /ci_hms/search of the component Search. The manipulation of the argument search with the input…

  • CVE-2022-1081MedMar 29, 2022
    risk 0.28cvss 4.3epss 0.01

    A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site…

  • CVE-2022-1079MedMar 29, 2022
    risk 0.28cvss 4.3epss 0.01

    A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.

  • CVE-2021-42663MedNov 5, 2021
    risk 0.28cvss 4.3epss 0.04

    An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target…

  • CVE-2021-35337MedJul 1, 2021
    risk 0.28cvss 4.3epss 0.01

    Sourcecodester Phone Shop Sales Managements System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). Any attacker will be able to see the invoices of different users by changing the id parameter.

  • CVE-2025-56608MedSep 3, 2025
    risk 0.27cvss 4.2epss 0.00

    The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in `OkHttpClientWrapper.java`. The `handleDigest()` function employs `MessageDigest.getInstance("MD5")` to hash credentials. MD5 is a broken cryptographic algorithm…

  • CVE-2023-0902LowFeb 18, 2023
    risk 0.26cvss 3.5epss 0.03

    A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file process_order.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the…

  • CVE-2022-33692MedJul 12, 2022
    risk 0.26cvss 4.0epss 0.00

    Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.

  • CVE-2024-0349LowJan 9, 2024
    risk 0.24cvss 3.7epss 0.00

    A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive cookie without secure attribute. The attack can be launched remotely. The…

  • CVE-2024-0347LowJan 9, 2024
    risk 0.24cvss 3.7epss 0.01

    A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as problematic. This issue affects some unknown processing of the file signup_teacher.php. The manipulation of the argument Password leads to weak password requirements. The attack may be…

  • CVE-2023-0785LowFeb 12, 2023
    risk 0.24cvss 3.7epss 0.01

    A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of sensitive information…

  • CVE-2026-94034LowSep 20, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the component Password Change. Performing a manipulation of the argument txtoldpassword/txtnewpassword…

  • CVE-2026-94033LowSep 20, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of the component User Management. Such manipulation of the argument txtname/txtemail/txtpassword leads to cross…

  • CVE-2026-90696LowSep 14, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products_handler.php of the component Product Management Module. Executing a manipulation of the argument Product_Name can lead…

  • CVE-2026-90695LowSep 14, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors_handler.php of the component Vendor Management. Performing a manipulation results in cross site scripting. The attack…

  • CVE-2026-90694LowSep 14, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers_handler.php of the component Customer Management Module. Such manipulation of the argument Customer_Name leads to cross site scripting.…

  • CVE-2026-19230LowAug 7, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was identified in SourceCodester Photo Share Website 1.0. This affects an unknown part of the file /social/ajax.php?action=save_upload of the component Comment Input Box. The manipulation of the argument content leads to cross site scripting. The attack may be…

  • CVE-2026-19209LowAug 7, 2026
    risk 0.23cvss 3.5epss 0.00

    A flaw has been found in SourceCodester Photo Share Website 1.0. The affected element is an unknown function of the file /social/index.php?page=home. This manipulation of the argument Comment causes cross site scripting. The attack may be initiated remotely. The exploit has been…

  • CVE-2026-11520LowJun 8, 2026
    risk 0.23cvss 3.5epss 0.00

    A weakness has been identified in SourceCodester Inventory System 1.0. Affected by this issue is some unknown functionality of the file header.php. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available…

  • CVE-2026-10247LowJun 1, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. This vulnerability affects the function create_generic_name of the file /ShowForm/create_generic_name/main. The manipulation of the argument generic_name results in cross site scripting. The…

  • CVE-2026-10246LowJun 1, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects the function create_medicine_presentation of the file /ShowForm/create_medicine_presentation/main. The manipulation of the argument medicine_presentation leads to cross site…

  • CVE-2026-10245LowJun 1, 2026
    risk 0.23cvss 3.5epss 0.00

    A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this issue is the function create_supplier of the file /ShowForm/create_supplier/main. Executing a manipulation of the argument company_name can lead to cross site scripting. The attack…

  • CVE-2026-10244LowJun 1, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected by this vulnerability is the function create_medicine_name of the file /ShowForm/create_medicine_name/main. Performing a manipulation of the argument medicine_name results in cross…

  • CVE-2026-9485LowMay 25, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was identified in SourceCodester Student Grades Management System 1.0. Affected by this issue is some unknown functionality of the file students.php. The manipulation of the argument Remarks leads to cross site scripting. Remote exploitation of the attack is…

  • CVE-2026-9414LowMay 25, 2026
    risk 0.23cvss 3.5epss 0.00

    A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice Template Render Database-Backed. The manipulation of the argument customer_name…

  • CVE-2026-7390LowApr 29, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the function Customer of the file /index.php?page=customer. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely.…

  • CVE-2026-5810LowApr 8, 2026
    risk 0.23cvss 3.5epss 0.00

    A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /delete.php of the component GET Parameter Handler. This manipulation of the argument ID causes cross site scripting. Remote exploitation of the attack is…

  • CVE-2026-5325LowApr 2, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0. This issue affects some unknown processing of the file /create-ticket.php of the component Create Ticket. This manipulation of the argument Description causes cross site…

  • CVE-2026-4973LowMar 27, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability was detected in SourceCodester Online Quiz System up to 1.0. Affected by this vulnerability is an unknown functionality of the file endpoint/add-question.php. Performing a manipulation of the argument quiz_question results in cross site scripting. It is possible…

  • CVE-2026-3819LowMar 9, 2026
    risk 0.23cvss 3.5epss 0.00

    A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the component Reservation Management Module. Such manipulation of the argument ID leads to cross site scripting.…

  • CVE-2026-3766LowMar 8, 2026
    risk 0.23cvss 3.5epss 0.00

    A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0. This impacts an unknown function of the file edit-profile.php. Performing a manipulation of the argument fullname results in cross site scripting. The attack may be initiated…

  • CVE-2026-3171LowFeb 25, 2026
    risk 0.23cvss 3.5epss 0.00

    A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /queue.php. This manipulation of the argument firstname/lastname causes cross site scripting. The…

Page 42 of 52