Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Engineers Online Portal — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Engineers Online Portal, with AI-generated Chinese analysis, references, and POCs.

Vendor: SourceCodester

CVE IDTitleCVSSSeverityPublished
CVE-2024-0351 SourceCodester Engineers Online Portal session fixiation CWE-384 3.1 Low2024-01-09
CVE-2024-0350 SourceCodester Engineers Online Portal session expiration CWE-613 3.1 Low2024-01-09
CVE-2024-0349 SourceCodester Engineers Online Portal missing secure attribute CWE-614 3.7 Low2024-01-09
CVE-2024-0348 SourceCodester Engineers Online Portal File Upload resource consumption CWE-400 4.3 Medium2024-01-09
CVE-2024-0347 SourceCodester Engineers Online Portal signup_teacher.php weak password CWE-521 3.7 Low2024-01-09
CVE-2024-0260 SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration CWE-613 4.3 Medium2024-01-07
CVE-2024-0182 SourceCodester Engineers Online Portal Admin Login sql injection CWE-89 7.3 High2024-01-01
CVE-2023-7160 SourceCodester Engineers Online Portal Add Engineer cross site scripting CWE-79 2.4 Low2023-12-29
CVE-2023-5284 SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload CWE-434 6.3 Medium2023-09-29
CVE-2023-5283 SourceCodester Engineers Online Portal teacher_signup.php sql injection CWE-89 6.3 Medium2023-09-29
CVE-2023-5282 SourceCodester Engineers Online Portal seed_message_student.php sql injection CWE-89 6.3 Medium2023-09-29
CVE-2023-5281 SourceCodester Engineers Online Portal remove_inbox_message.php sql injection CWE-89 6.3 Medium2023-09-29
CVE-2023-5280 SourceCodester Engineers Online Portal my_students.php sql injection CWE-89 6.3 Medium2023-09-29
CVE-2023-5279 SourceCodester Engineers Online Portal my_classmates.php sql injection CWE-89 6.3 Medium2023-09-29
CVE-2023-5278 SourceCodester Engineers Online Portal login.php sql injection CWE-89 6.3 Medium2023-09-29
CVE-2023-5277 SourceCodester Engineers Online Portal student_avatar.php unrestricted upload CWE-434 6.3 Medium2023-09-29
CVE-2023-5276 SourceCodester Engineers Online Portal downloadable_student.php sql injection CWE-89 6.3 Medium2023-09-29

All 17 known CVE vulnerabilities affecting Engineers Online Portal with full Chinese analysis, references, and POCs where available.