Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 1985

Browse all 1985 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE ID Title CVSS Severity Published
CVE-2026-3754 SourceCodester Sales and Inventory System add_stock.php sql injection — Sales and Inventory System CWE-89 6.3 Medium 2026-03-08
CVE-2026-3753 SourceCodester Sales and Inventory System add_sales_print.php sql injection — Sales and Inventory System CWE-89 6.3 Medium 2026-03-08
CVE-2026-3752 SourceCodester Employee Task Management System GET Parameter daily-task-report.php sql injection — Employee Task Management System CWE-89 4.7 Medium 2026-03-08
CVE-2026-3751 SourceCodester Employee Task Management System GET Parameter daily-attendance-report.php sql injection — Employee Task Management System CWE-89 4.7 Medium 2026-03-08
CVE-2026-3746 SourceCodester Simple Responsive Tourism Website Login Login.php sql injection — Simple Responsive Tourism Website CWE-89 7.3 High 2026-03-08
CVE-2026-3738 SourceCodester Pet Grooming Management Software Financial Report improper authorization — Pet Grooming Management Software CWE-285 6.3 Medium 2026-03-08
CVE-2026-3737 SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorization — Pet Grooming Management Software CWE-285 6.3 Medium 2026-03-08
CVE-2026-3734 SourceCodester Client Database Management System Endpoint fetch_manager_details.php improper authorization — Client Database Management System CWE-285 7.3 High 2026-03-08
CVE-2026-3724 SourceCodester Patients Waiting Area Queue Management System checkin.php improper authorization — Patients Waiting Area Queue Management System CWE-285 6.3 Medium 2026-03-08
CVE-2026-3702 SourceCodester Loan Management System index.php cross site scripting — Loan Management System CWE-79 4.3 Medium 2026-03-08
CVE-2026-3695 SourceCodester Modern Image Gallery App delete.php path traversal — Modern Image Gallery App CWE-22 6.5 Medium 2026-03-08
CVE-2026-3401 SourceCodester Web-based Pharmacy Product Management System session expiration — Web-based Pharmacy Product Management System CWE-613 3.1 Low 2026-03-02
CVE-2026-3302 SourceCodester Doctor Appointment System Sign Up register.php cross site scripting — Doctor Appointment System CWE-79 4.3 Medium 2026-02-27
CVE-2026-3171 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System queue.php cross site scripting — Patients Waiting Area Queue Management System CWE-79 3.5 Low 2026-02-25
CVE-2026-3170 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System patient-search.php cross site scripting — Patients Waiting Area Queue Management System CWE-79 2.4 Low 2026-02-25
CVE-2026-3163 SourceCodester Website Link Extractor URL file_get_contents server-side request forgery — Website Link Extractor CWE-918 6.3 Medium 2026-02-25
CVE-2026-3148 SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection — Simple and Nice Shopping Cart Script CWE-89 7.3 High 2026-02-25
CVE-2026-3070 SourceCodester Modern Image Gallery App upload.php cross site scripting — Modern Image Gallery App CWE-79 4.3 Medium 2026-02-24
CVE-2026-2984 SourceCodester Student Result Management System drop_user.php denial of service — Student Result Management System CWE-404 6.5 Medium 2026-02-23
CVE-2026-2983 SourceCodester Student Result Management System Bulk Import import_users.php access control — Student Result Management System CWE-284 7.3 High 2026-02-23
CVE-2026-2938 SourceCodester Student Result Management System update_smtp.php access control — Student Result Management System CWE-284 7.3 High 2026-02-22
CVE-2026-2848 SourceCodester Simple Responsive Tourism Website Registration Master.php sql injection — Simple Responsive Tourism Website CWE-89 7.3 High 2026-02-20
CVE-2026-2177 SourceCodester Prison Management System Login session fixiation — Prison Management System CWE-384 7.3 High 2026-02-08
CVE-2026-2160 SourceCodester Simple Responsive Tourism Website Master.php cross site scripting — Simple Responsive Tourism Website CWE-79 4.3 Medium 2026-02-08
CVE-2026-2159 SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scripting — Simple Responsive Tourism Website CWE-79 4.3 Medium 2026-02-08
CVE-2026-2154 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System Patient Registration registration.php cross site scripting — Patients Waiting Area Queue Management System CWE-79 4.3 Medium 2026-02-08
CVE-2026-2150 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scripting — Patients Waiting Area Queue Management System CWE-79 4.3 Medium 2026-02-08
CVE-2026-2149 SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scripting — Patients Waiting Area Queue Management System CWE-79 4.3 Medium 2026-02-08
CVE-2026-2090 SourceCodester Online Class Record System search.php sql injection — Online Class Record System CWE-89 7.3 High 2026-02-07
CVE-2026-2089 SourceCodester Online Class Record System controller.php sql injection — Online Class Record System CWE-89 7.3 High 2026-02-07

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.