Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 1985

Browse all 1985 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE ID Title CVSS Severity Published
CVE-2024-6905 SourceCodester Record Management System view_info_user.php sql injection — Record Management System CWE-89 6.3 Medium 2024-07-19
CVE-2024-6904 SourceCodester Record Management System sort2_user.php sql injection — Record Management System CWE-89 6.3 Medium 2024-07-19
CVE-2024-6903 SourceCodester Record Management System sort1_user.php sql injection — Record Management System CWE-89 6.3 Medium 2024-07-19
CVE-2024-6902 SourceCodester Record Management System sort_user.php sql injection — Record Management System CWE-89 6.3 Medium 2024-07-19
CVE-2024-6901 SourceCodester Record Management System entry.php sql injection — Record Management System CWE-89 6.3 Medium 2024-07-19
CVE-2024-6900 SourceCodester Record Management System edit_emp.php sql injection — Record Management System CWE-89 6.3 Medium 2024-07-19
CVE-2024-6899 SourceCodester Record Management System view_info.php sql injection — Record Management System CWE-89 6.3 Medium 2024-07-19
CVE-2024-6898 SourceCodester Record Management System index.php sql injection — Record Management System CWE-89 7.3 High 2024-07-19
CVE-2024-6830 SourceCodester Simple Inventory Management System Order action.php sql injection — Simple Inventory Management System CWE-89 6.3 Medium 2024-07-17
CVE-2024-6807 SourceCodester Student Study Center Desk Management System HTTP POST Request Users.php cross site scripting — Student Study Center Desk Management System CWE-79 2.4 Low 2024-07-17
CVE-2024-6802 SourceCodester Computer Laboratory Management System Master.php sql injection — Computer Laboratory Management System CWE-89 6.3 Medium 2024-07-17
CVE-2024-6801 SourceCodester Online Student Management System add-students.php unrestricted upload — Online Student Management System CWE-434 6.3 Medium 2024-07-17
CVE-2024-6736 SourceCodester Employee and Visitor Gate Pass Logging System view_employee.php sql injection — Employee and Visitor Gate Pass Logging System CWE-89 6.3 Medium 2024-07-15
CVE-2024-6732 SourceCodester Student Study Center Desk Management System Users.php sql injection — Student Study Center Desk Management System CWE-89 6.3 Medium 2024-07-14
CVE-2024-6731 SourceCodester Student Study Center Desk Management System Master.php sql injection — Student Study Center Desk Management System CWE-89 6.3 Medium 2024-07-14
CVE-2024-6729 SourceCodester Kortex Lite Advocate Office Management System add_act.php sql injection — Kortex Lite Advocate Office Management System CWE-89 6.3 Medium 2024-07-14
CVE-2024-6650 SourceCodester Employee and Visitor Gate Pass Logging System Master.php save_designation cross site scripting — Employee and Visitor Gate Pass Logging System CWE-79 2.4 Low 2024-07-10
CVE-2024-6649 SourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgery — Employee and Visitor Gate Pass Logging System CWE-352 4.3 Medium 2024-07-10
CVE-2024-6471 SourceCodester Online Tours & Travels Management sms_setting.php sql injection — Online Tours & Travels Management CWE-89 6.3 Medium 2024-07-03
CVE-2024-6440 SourceCodester Home Owners Collection Management System sql injection — Home Owners Collection Management System CWE-89 6.3 Medium 2024-07-02
CVE-2024-6439 SourceCodester Home Owners Collection Management System unrestricted upload — Home Owners Collection Management System CWE-434 6.3 Medium 2024-07-02
CVE-2024-6419 SourceCodester Medicine Tracker System sql injection — Medicine Tracker System CWE-89 6.3 Medium 2024-06-30
CVE-2024-6418 SourceCodester Medicine Tracker System sql injection — Medicine Tracker System CWE-89 7.3 High 2024-06-30
CVE-2024-6417 SourceCodester Simple Online Bidding System sql injection — Simple Online Bidding System CWE-89 6.3 Medium 2024-06-30
CVE-2024-6280 SourceCodester Simple Online Bidding System unrestricted upload — Simple Online Bidding System CWE-434 6.3 Medium 2024-06-24
CVE-2024-6273 SourceCodester Clinic Queuing System patient_side.php save_patient cross site scripting — Clinic Queuing System CWE-79 4.3 Medium 2024-06-23
CVE-2024-6267 SourceCodester Service Provider Management System System Info Page index.php cross site scripting — Service Provider Management System CWE-79 2.4 Low 2024-06-23
CVE-2024-6217 SourceCodester Food Ordering Management System user-router.php sql injection — Food Ordering Management System CWE-89 6.3 Medium 2024-06-21
CVE-2024-6216 SourceCodester Food Ordering Management System add-users.php sql injection — Food Ordering Management System CWE-89 6.3 Medium 2024-06-21
CVE-2024-6215 SourceCodester Food Ordering Management System view-ticket-admin.php sql injection — Food Ordering Management System CWE-89 6.3 Medium 2024-06-21

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.