Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Simple Online Bidding System — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Simple Online Bidding System, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting the Simple Online Bidding System, a web-based platform for online auctions, categorized primarily by common weakness types such as SQL injection, cross-site scripting, and improper input validation. It collects publicly disclosed security advisories, bug reports, and patch notes published between 2015 and 2023, covering multiple versions of the product. Readers can use this page to track the vendor's security posture over time, analyze the frequency and severity of specific weakness classes, and review the complete vulnerability history for the Simple Online Bidding System. The data is organized to support threat modeling and remediation planning by highlighting recurring defects and their resolution status, enabling developers and security teams to identify patterns in the product’s evolution and prioritize fixes based on risk impact. No individual CVE identifiers are listed here; instead, the focus remains on aggregating trends and class-level insights derived from the collected advisories.

Vendor: SourceCodester

CVE ID Title CVSS Severity Published
CVE-2024-7911 SourceCodester Simple Online Bidding System index.php file inclusion CWE-73 6.3 Medium 2024-08-18
CVE-2024-7800 SourceCodester Simple Online Bidding System ajax.php sql injection CWE-89 6.3 Medium 2024-08-14
CVE-2024-7799 SourceCodester Simple Online Bidding System users.php improper authorization CWE-285 5.3 Medium 2024-08-14
CVE-2024-7798 SourceCodester Simple Online Bidding System ajax.php sql injection CWE-89 7.3 High 2024-08-14
CVE-2024-7797 SourceCodester Simple Online Bidding System ajax.php sql injection CWE-89 7.3 High 2024-08-14
CVE-2024-6417 SourceCodester Simple Online Bidding System sql injection CWE-89 6.3 Medium 2024-06-30
CVE-2024-6280 SourceCodester Simple Online Bidding System unrestricted upload CWE-434 6.3 Medium 2024-06-24
CVE-2024-5437 SourceCodester Simple Online Bidding System save_category cross site scripting CWE-79 3.5 Low 2024-05-28
CVE-2024-5428 SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgery CWE-352 4.3 Medium 2024-05-28
CVE-2024-4933 SourceCodester Simple Online Bidding System sql injection CWE-89 6.3 Medium 2024-05-16
CVE-2024-4932 SourceCodester Simple Online Bidding System sql injection CWE-89 6.3 Medium 2024-05-16
CVE-2024-4931 SourceCodester Simple Online Bidding System sql injection CWE-89 6.3 Medium 2024-05-16
CVE-2024-4930 SourceCodester Simple Online Bidding System sql injection CWE-89 6.3 Medium 2024-05-16
CVE-2024-4929 SourceCodester Simple Online Bidding System cross-site request forgery CWE-352 4.3 Medium 2024-05-16
CVE-2024-4928 SourceCodester Simple Online Bidding System sql injection CWE-89 6.3 Medium 2024-05-16
CVE-2024-4927 SourceCodester Simple Online Bidding System unrestricted upload CWE-434 7.3 High 2024-05-16
CVE-2024-2077 SourceCodester Simple Online Bidding System index.php sql injection CWE-89 6.3 Medium 2024-03-01

All 17 known CVE vulnerabilities affecting Simple Online Bidding System with full Chinese analysis, references, and POCs where available.