CVE-2026-3163— SourceCodester Website Link Extractor URL file_get_contents server-side request forgery
Quick assessment
Affected
SourceCodester Website Link Extractor
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SourceCodester Website Link Extractor是SourceCodester开源的一个网站链接提取器。 SourceCodester Website Link Extractor 1.0版本存在代码问题漏洞，该漏洞源于URL Handler组件中file_get_contents函数存在服务端请求伪造问题。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-3163
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SourceCodester Website Link Extractor URL file_get_contents server-side request forgery
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in SourceCodester Website Link Extractor 1.0. This vulnerability affects the function file_get_contents of the component URL Handler. The manipulation leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
SourceCodester Website Link Extractor 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SourceCodester Website Link Extractor是SourceCodester开源的一个网站链接提取器。 SourceCodester Website Link Extractor 1.0版本存在代码问题漏洞，该漏洞源于URL Handler组件中file_get_contents函数存在服务端请求伪造问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SourceCodester | Website Link Extractor | 1.0 | - |
|
II. Public POCs for CVE-2026-3163
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-3163
请登录查看更多情报信息。
Other References for CVE-2026-3163 (1)
Same Patch Batch · SourceCodester · 2026-02-25 · 4 CVEs total
| CVE-2026-3148 | 7.3 HIGH | SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection |
| CVE-2026-3171 | 3.5 LOW | SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross |
| CVE-2026-3170 | 2.4 LOW | SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search. |
IV. Related Vulnerabilities
Same vendor: SourceCodester
-
CVE-2026-105182
SourceCodester Online Reviewer Management System btn_functio -
CVE-2026-105179
SourceCodester Drug Recommendation System Password add_user. -
CVE-2026-105178
SourceCodester Drug Recommendation System Symptom Creation a -
CVE-2026-105177
SourceCodester Drug Recommendation System Drug Creation add_ -
CVE-2026-105176
SourceCodester Drug Recommendation System edit_class.php sql
Same weakness: CWE-918
-
CVE-2026-105214
Zitadel before 4.16.2 SSRF via Organization Domain HTTP Veri -
CVE-2026-105148
SciPhi-AI R2R Retrieval Completion API Endpoint llm.py serve -
CVE-2026-105122
OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri -
CVE-2026-82044
UTMStack < 11.2.16 Server-Side Request Forgery via downloadP -
CVE-2026-82040
UTMStack < 11.2.16 SSRF via IdentityProviderService
V. Comments for CVE-2026-3163
No comments yet