Skip to contentSourcecodester vulnerabilities
Products
Show 140 moreShow less
Newest
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System check_item_details.php sql injectionCVE-2026-37565.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System POST check_customer_details.php sql injectionCVE-2026-37555.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System add_stock.php sql injectionCVE-2026-37545.3 Medium
- ahsanriaz26gmailcom sales and inventory systemSourceCodester Sales and Inventory System add_sales_print.php sql injectionCVE-2026-37535.3 Medium
- oretnom23 employee task management systemSourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injectionCVE-2026-37525.1 Medium
- oretnom23 employee task management systemSourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injectionCVE-2026-37515.1 Medium
- oretnom23 simple responsive tourism websiteSourceCodester Simple Responsive Tourism Website Login Login.php sql injectionCVE-2026-37466.9 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software Financial Report improper authorizationCVE-2026-37385.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software User Creation add_user.php improper authorizationCVE-2026-37375.3 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorizationCVE-2026-37346.9 Medium
- pamzey patients waiting area queue management systemSourceCodester Patients Waiting Area Queue Management System checkin.php improper authorizationCVE-2026-37245.3 Medium
- oretnom23 loan management systemSourceCodester Loan Management System index.php cross site scriptingCVE-2026-37025.3 Medium
- remyandrade modern image gallery appSourceCodester Modern Image Gallery App delete.php path traversalCVE-2026-36956.9 Medium
- senior-walter web-based pharmacy product management systemSourceCodester Web-based Pharmacy Product Management System session expirationCVE-2026-34012.3 Low
- remyandrade doctor appointment systemSourceCodester Doctor Appointment System Sign Up register.php cross site scriptingCVE-2026-33025.3 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scriptingCVE-2026-3171Public exploit5.1 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scriptingCVE-2026-31704.8 Medium
- remyandrade website link extractorSourceCodester Website Link Extractor URL file_get_contents server-side request forgeryCVE-2026-31635.3 Medium
- haben-cs9 simple and nice shopping cart scriptSourceCodester Simple and Nice Shopping Cart Script signup.php sql injectionCVE-2026-31486.9 Medium
- remyandrade modern image gallery appSourceCodester Modern Image Gallery App upload.php cross site scriptingCVE-2026-30705.3 Medium
- munyweki student result management systemSourceCodester Student Result Management System drop_user.php denial of serviceCVE-2026-29846.9 Medium
- munyweki student result management systemSourceCodester Student Result Management System Bulk Import import_users.php access controlCVE-2026-29836.9 Medium
- munyweki student result management systemSourceCodester Student Result Management System update_smtp.php access controlCVE-2026-29386.9 Medium
- oretnom23 simple responsive tourism websiteSourceCodester Simple Responsive Tourism Website Registration Master.php sql injectionCVE-2026-28486.9 Medium
- fast5 prison management systemSourceCodester Prison Management System Login session fixiationCVE-2026-21776.9 Medium
- oretnom23 simple responsive tourism websiteSourceCodester Simple Responsive Tourism Website Master.php cross site scriptingCVE-2026-21605.3 Medium
- oretnom23 simple responsive tourism websiteSourceCodester Simple Responsive Tourism Website Registration Master.php cross site scriptingCVE-2026-21595.3 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System Patient Registration registration.php cross site scriptingCVE-2026-21545.3 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scriptingCVE-2026-21505.3 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scriptingCVE-2026-21495.3 Medium
- projectworlds online food ordering systemprojectworlds Online Food Ordering System view-ticket.php sql injectionCVE-2026-21366.9 Medium
- janobe online class record systemSourceCodester Online Class Record System search.php sql injectionCVE-2026-20906.9 Medium
- janobe online class record systemSourceCodester Online Class Record System controller.php sql injectionCVE-2026-20896.9 Medium
- janobe online class record systemSourceCodester Online Class Record System login.php sql injectionCVE-2026-20876.9 Medium
- bontrofftech medical center portal management systemSourceCodester Medical Center Portal Management System emp_edit1.php sql injectionCVE-2026-20596.9 Medium
- bontrofftech medical center portal management systemSourceCodester Medical Center Portal Management System login.php sql injectionCVE-2026-20576.9 Medium
- mayurik gas agency management systemSourceCodester Gas Agency Management System createUser.php access controlCVE-2026-20095.3 Medium
- oretnom23 medical certificate generator appSourceCodester Medical Certificate Generator App cross-site request forgeryCVE-2026-17455.3 Medium
- mayurik pet grooming management softwareSourceCodester Pet Grooming Management Software User Management user.php improper authorizationCVE-2026-17025.3 Medium
- janobe e-learning systemSourceCodester E-Learning System Lesson index.php cross site scriptingCVE-2026-11545.3 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System cross-site request forgeryCVE-2026-11485.3 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_patient_schedule.php cross site scriptingCVE-2026-11475.1 Medium
- pamzey patients waiting area queue management systemSourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System api_register_patient.php cross site scriptingCVE-2026-11465.1 Medium
- remyandrade api key manager appSourceCodester API Key Manager App Import Key cross site scriptingCVE-2026-05805.1 Medium
- lerouxyxchire client database management systemSourceCodester Client Database Management System Leads Generation user_leads.php unrestricted uploadCVE-2025-148855.3 Medium
- carmelo prison management systemcode-projects Prison Management System search1.php sql injectionCVE-2025-145906.9 Medium
- carmelo prison management systemcode-projects Prison Management System search.php sql injectionCVE-2025-145895.3 Medium
- remyandrade real estate property listing appSourceCodester Real Estate Property Listing App property.php unrestricted uploadCVE-2025-145305.1 Medium
- code-projects inventory management systemSourceCodester Inventory Management System SVC Report Export csv injectionCVE-2025-142295.1 Medium
- oretnom23 banking system, sourcecodester online banking system +1 moreSourceCodester Online Banking System page cross site scriptingCVE-2025-14221Public exploit5.1 Medium
- Show moreLoading…