VYPR

Vendor CVEs

Sourcecodester

All CVEs

2,498 total · sorted by risk
  • CVE-2026-15703HigJul 14, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This vulnerability affects unknown code of the file /admin/userproductdeletequery.php. Performing a manipulation of the argument user_id results in sql injection. It is possible to initiate…

  • CVE-2026-15597HigJul 13, 2026
    risk 0.00cvss 7.3epss 0.00

    A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. This affects an unknown function of the file /edit_exam2.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The…

  • CVE-2026-15596MedJul 13, 2026
    risk 0.00cvss 4.3epss 0.00

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /subject.php. Such manipulation of the argument subject leads to cross site scripting. It is possible to launch the attack remotely.…

  • CVE-2026-15595MedJul 13, 2026
    risk 0.00cvss 4.3epss 0.00

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /forsubject.php. This manipulation of the argument subject causes cross site scripting. It is possible to initiate the attack remotely.…

  • CVE-2026-15540MedJul 13, 2026
    risk 0.00cvss 4.3epss 0.00

    A vulnerability was detected in SourceCodester Online Book Store System 1.0. The affected element is an unknown function of the file /admin/index.php of the component Administrative Interface. Performing a manipulation of the argument page results in improper control of filename…

  • CVE-2026-15539MedJul 13, 2026
    risk 0.00cvss 4.7epss 0.00

    A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be…

  • CVE-2026-15537HigJul 13, 2026
    risk 0.00cvss 7.3epss 0.00

    A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been…

  • CVE-2026-15532LowJul 13, 2026
    risk 0.00cvss 2.4epss 0.00

    A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects some unknown processing of the component User Management Module. Such manipulation of the argument Name/Username leads to cross site scripting. The attack can be executed remotely.…

  • CVE-2026-15190HigJul 9, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown part of the file /login.php. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit…

  • CVE-2026-14778HigJul 6, 2026
    risk 0.00cvss 7.3epss 0.00

    A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This affects an unknown part of the file /ajax_enroll.php of the component Enrollment Management. The manipulation of the argument student_id/schedule_id/action leads…

  • CVE-2026-14777MedJul 6, 2026
    risk 0.00cvss 6.3epss 0.00

    A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed…

  • CVE-2026-14776MedJul 5, 2026
    risk 0.00cvss 6.3epss 0.00

    A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted…

  • CVE-2026-14775MedJul 5, 2026
    risk 0.00cvss 6.3epss 0.00

    A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unknown function of the file /process_lesson.php. Such manipulation of the argument user_id leads to unrestricted upload. The attack may be launched remotely. The…

  • CVE-2026-14772HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The impacted element is an unknown function of the file /edit_course1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit…

  • CVE-2026-14771HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected element is an unknown function of the file /edit_exam1.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The…

  • CVE-2026-14770HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_room.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit is…

  • CVE-2026-14734HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_product.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published…

  • CVE-2026-14733HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. This issue affects some unknown processing of the file /edit_coursea.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now…

  • CVE-2026-14732HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /edit_exam.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit…

  • CVE-2026-14725MedJul 5, 2026
    risk 0.00cvss 6.3epss 0.00

    A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and…

  • CVE-2026-14719HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A flaw has been found in SourceCodester Onlne Examination & Learning Management System 1.0. The impacted element is an unknown function of the file register.php of the component Registration Endpoint. Executing a manipulation of the argument role can lead to improper privilege…

  • CVE-2026-14713HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A security flaw has been discovered in SourceCodester Pizzafy E-Commerce System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=confirm_order. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The…

  • CVE-2026-14698MedJul 5, 2026
    risk 0.00cvss 6.3epss 0.00

    A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file upload_files.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely.…

  • CVE-2026-14695HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_client of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is…

  • CVE-2026-14694MedJul 5, 2026
    risk 0.00cvss 6.3epss 0.00

    A vulnerability has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this issue is the function cancel_order of the file classes/Master.php of the component POST Parameter Handler. The manipulation of the argument ID leads to sql…

  • CVE-2026-14693MedJul 5, 2026
    risk 0.00cvss 5.4epss 0.00

    A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master.php. Executing a manipulation can lead to improper authorization. The attack may be performed from…

  • CVE-2026-14692MedJul 5, 2026
    risk 0.00cvss 6.3epss 0.00

    A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save_shop_type of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack…

  • CVE-2026-14691MedJul 5, 2026
    risk 0.00cvss 6.3epss 0.00

    A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function update_settings_info of the file classes/SystemSettings.php of the component Setting Handler. Such manipulation of the argument content[]…

  • CVE-2026-14690HigJul 5, 2026
    risk 0.00cvss 7.3epss 0.00

    A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has…

  • CVE-2026-14654HigJul 4, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was identified in SourceCodester Simple and Nice Shopping Cart Script 1.0. Affected is an unknown function of the file /admin/girlsproductdeletequery.php. Such manipulation of the argument user_id leads to sql injection. The attack can be executed remotely. The…

  • CVE-2026-14653HigJul 4, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0. This impacts an unknown function of the file /admin/mensproductdeletequery.php. This manipulation of the argument user_id causes sql injection. Remote exploitation of the attack is…

  • CVE-2026-14652HigJul 4, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. This affects an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username results in sql injection. The attack may be launched…

  • CVE-2026-14642HigJul 4, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_class2.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out…

  • CVE-2026-14641HigJul 4, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_course.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed…

  • CVE-2026-14609MedJul 3, 2026
    risk 0.00cvss 5.6epss 0.00

    A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue affects some unknown processing. The manipulation results in session fixiation. The attack can be executed remotely. The attack requires a high level of…

  • CVE-2026-14608MedJul 3, 2026
    risk 0.00cvss 4.3epss 0.00

    A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=view_student of the component POST Handler. The manipulation of the argument ID leads…

  • CVE-2026-13571MedJun 29, 2026
    risk 0.00cvss 5.3epss 0.00

    A flaw has been found in SourceCodester Simple Food Ordering System 1.0. The affected element is an unknown function of the file /cart.php. Executing a manipulation of the argument item_price can lead to business logic errors. The attack may be performed from remote. The exploit…

  • CVE-2026-13570LowJun 29, 2026
    risk 0.00cvss 3.5epss 0.00

    A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users_handler.php of the component User Registration Endpoint. Performing a manipulation of the argument full_name results in cross site scripting.…

  • CVE-2026-13568HigJun 29, 2026
    risk 0.00cvss 7.3epss 0.00

    A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_handler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls.…

  • CVE-2026-13566HigJun 29, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /preview3.php. The manipulation of the argument course_year_section leads to sql injection. The attack may be initiated…

  • CVE-2026-13565HigJun 29, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. Affected by this vulnerability is an unknown functionality of the file /edit_class1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be…

  • CVE-2026-13527HigJun 29, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /preview4.php. Such manipulation of the argument course_year_section leads to sql injection. The attack may be launched remotely. The…

  • CVE-2026-13526HigJun 29, 2026
    risk 0.00cvss 7.3epss 0.00

    A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of the file /edit_class.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be…

  • CVE-2026-13521HigJun 29, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0/5.php. Affected by this vulnerability is an unknown functionality of the file /preview5.php. Such manipulation of the argument course_year_section leads to sql injection. The attack may be…

  • CVE-2026-13488HigJun 28, 2026
    risk 0.00cvss 7.3epss 0.00

    A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php. Affected by this vulnerability is an unknown functionality of the file /preview7.php. The manipulation of the argument course_year_section results in sql injection. The attack may…

  • CVE-2026-13487HigJun 28, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive.php. The manipulation of the argument sy leads to sql injection. The attack may be initiated remotely. The exploit is publicly available…

  • CVE-2026-13486HigJun 28, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php. This impacts an unknown function of the file /preview6.php. Executing a manipulation of the argument course_year_section can lead to sql injection. The attack can be launched remotely.…

  • CVE-2026-13485HigJun 28, 2026
    risk 0.00cvss 7.3epss 0.00

    A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown function of the file /preview.php. Performing a manipulation of the argument course_year_section results in sql injection. The attack can be initiated remotely. The exploit…

Page 50 of 50