Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 2050

Browse all 2050 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE ID Title CVSS Severity Published
CVE-2026-116605 SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security — Online Food Ordering System CWE-602 5.3 Medium 2026-10-27
CVE-2026-116604 SourceCodester Online Food Ordering System delete_admin.php missing authentication — Online Food Ordering System CWE-306 6.5 Medium 2026-10-26
CVE-2026-116603 SourceCodester Online Food Ordering System add_food.php unrestricted upload — Online Food Ordering System CWE-434 4.7 Medium 2026-10-26
CVE-2026-116602 SourceCodester Online Food Ordering System delete.php unlink path traversal — Online Food Ordering System CWE-22 6.5 Medium 2026-10-26
CVE-2026-116062 SourceCodester Performance Indicator System save_profile.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-25
CVE-2026-116061 SourceCodester Performance Indicator System edit_dealer.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-25
CVE-2026-116060 SourceCodester Performance Indicator System adddealer.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-25
CVE-2026-116055 SourceCodester Performance Indicator System deleteproduct.php sql injection — Performance Indicator System CWE-89 6.3 Medium 2026-10-25
CVE-2026-114267 SourceCodester Food Order Management System Admin Endpoint authorization — Food Order Management System CWE-862 7.3 High 2026-10-21
CVE-2026-112097 SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting — Inventory System CWE-79 3.5 Low 2026-10-19
CVE-2026-112096 SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting — Inventory System CWE-79 3.5 Low 2026-10-19
CVE-2026-112095 SourceCodester Inventory System Product Management products_handler.php save cross site scripting — Inventory System CWE-79 3.5 Low 2026-10-19
CVE-2026-109620 SourceCodester Online Reviewer System index.php prepare sql injection — Online Reviewer System CWE-89 7.3 High 2026-10-13
CVE-2026-109607 SourceCodester Online Exam System Login Endpoint loginExe.php sql injection — Online Exam System CWE-89 7.3 High 2026-10-13
CVE-2026-109606 SourceCodester Art Gallery Management System Account Creation admin_class.php save_user sql injection — Art Gallery Management System CWE-89 7.3 High 2026-10-13
CVE-2026-109605 SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization — Simple Cafe Billing System CWE-285 7.3 High 2026-10-13
CVE-2026-108975 SourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload — Library Management System CWE-434 7.3 High 2026-10-13
CVE-2026-108974 SourceCodester E-Learning System Users.php save_users unrestricted upload — E-Learning System CWE-434 7.3 High 2026-10-13
CVE-2026-108973 SourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload — Contact Tracing System CWE-434 7.3 High 2026-10-13
CVE-2026-108972 SourceCodester Human Resource Management System Employee Endpoint employee.php session_start improper authentication — Human Resource Management System CWE-287 7.3 High 2026-10-13
CVE-2026-108968 SourceCodester Performance Indicator System sales_history.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-13
CVE-2026-108967 SourceCodester Performance Indicator System edit_credit.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-13
CVE-2026-108966 SourceCodester Performance Indicator System product.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-13
CVE-2026-108965 SourceCodester Performance Indicator System edit_quantity.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-13
CVE-2026-108964 SourceCodester Performance Indicator System addproduct.php sql injection — Performance Indicator System CWE-89 7.3 High 2026-10-13
CVE-2026-108920 SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross site scripting — Drug Recommendation System CWE-79 4.3 Medium 2026-10-12
CVE-2026-108919 SourceCodester Drug Recommendation System Student Registration add_student.php cross site scripting — Drug Recommendation System CWE-79 4.3 Medium 2026-10-12
CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection — Performance Indicator System CWE-89 6.3 Medium 2026-10-06
CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting — Simple Student Information System CWE-79 4.3 Medium 2026-10-06
CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting — Simple Student Information System CWE-79 3.5 Low 2026-10-06

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.