Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 1985

Browse all 1985 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE ID Title CVSS Severity Published
CVE-2024-1028 SourceCodester Facebook News Feed Like Post cross site scripting — Facebook News Feed Like CWE-79 3.5 Low 2024-01-30
CVE-2024-1027 SourceCodester Facebook News Feed Like Post unrestricted upload — Facebook News Feed Like CWE-434 6.3 Medium 2024-01-30
CVE-2024-1024 SourceCodester Facebook News Feed Like New Account cross site scripting — Facebook News Feed Like CWE-79 3.5 Low 2024-01-30
CVE-2024-1011 SourceCodester Employee Management System Leave delete-leave.php access control — Employee Management System CWE-284 4.3 Medium 2024-01-29
CVE-2024-1010 SourceCodester Employee Management System edit-profile.php cross site scripting — Employee Management System CWE-79 3.5 Low 2024-01-29
CVE-2024-1009 SourceCodester Employee Management System login.php sql injection — Employee Management System CWE-89 7.3 High 2024-01-29
CVE-2024-1008 SourceCodester Employee Management System Profile Page edit-photo.php unrestricted upload — Employee Management System CWE-434 4.7 Medium 2024-01-29
CVE-2024-1007 SourceCodester Employee Management System edit_profile.php sql injection — Employee Management System CWE-89 6.3 Medium 2024-01-29
CVE-2024-0884 SourceCodester Online Tours & Travels Management System payment.php exec sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2024-01-25
CVE-2024-0883 SourceCodester Online Tours & Travels Management System pay.php prepare sql injection — Online Tours & Travels Management System CWE-89 6.3 Medium 2024-01-25
CVE-2024-0735 SourceCodester Online Tours & Travels Management System expense.php exec sql injection — Online Tours & Travels Management System CWE-89 6.3 Medium 2024-01-19
CVE-2024-0502 SourceCodester House Rental Management System Edit User manage_user.php sql injection — House Rental Management System CWE-89 4.7 Medium 2024-01-13
CVE-2024-0501 SourceCodester House Rental Management System Manage Invoice Details cross site scripting — House Rental Management System CWE-79 2.4 Low 2024-01-13
CVE-2024-0500 SourceCodester House Rental Management System Manage Tenant Details cross site scripting — House Rental Management System CWE-79 2.4 Low 2024-01-13
CVE-2024-0499 SourceCodester House Rental Management System index.php cross site scripting — House Rental Management System CWE-79 2.4 Low 2024-01-13
CVE-2024-0389 SourceCodester Student Attendance System attendance_report.php sql injection — Student Attendance System CWE-89 6.3 Medium 2024-01-10
CVE-2024-0351 SourceCodester Engineers Online Portal session fixiation — Engineers Online Portal CWE-384 3.1 Low 2024-01-09
CVE-2024-0350 SourceCodester Engineers Online Portal session expiration — Engineers Online Portal CWE-613 3.1 Low 2024-01-09
CVE-2024-0349 SourceCodester Engineers Online Portal missing secure attribute — Engineers Online Portal CWE-614 3.7 Low 2024-01-09
CVE-2024-0348 SourceCodester Engineers Online Portal File Upload resource consumption — Engineers Online Portal CWE-400 4.3 Medium 2024-01-09
CVE-2024-0347 SourceCodester Engineers Online Portal signup_teacher.php weak password — Engineers Online Portal CWE-521 3.7 Low 2024-01-09
CVE-2024-0265 SourceCodester Clinic Queuing System GET Parameter index.php file inclusion — Clinic Queuing System CWE-73 6.3 Medium 2024-01-07
CVE-2024-0264 SourceCodester Clinic Queuing System LoginRegistration.php authorization — Clinic Queuing System CWE-639 7.3 High 2024-01-07
CVE-2024-0260 SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration — Engineers Online Portal CWE-613 4.3 Medium 2024-01-07
CVE-2024-0182 SourceCodester Engineers Online Portal Admin Login sql injection — Engineers Online Portal CWE-89 7.3 High 2024-01-01
CVE-2023-7160 SourceCodester Engineers Online Portal Add Engineer cross site scripting — Engineers Online Portal CWE-79 2.4 Low 2023-12-29
CVE-2023-7157 SourceCodester Free and Open Source Inventory Management System sell_return_data.php sql injection — Free and Open Source Inventory Management System CWE-89 6.3 Medium 2023-12-29
CVE-2023-7155 SourceCodester Free and Open Source Inventory Management System edit_product.php sql injection — Free and Open Source Inventory Management System CWE-89 6.3 Medium 2023-12-29
CVE-2023-7134 SourceCodester Medicine Tracking System path traversal — Medicine Tracking System CWE-24 6.3 Medium 2023-12-28
CVE-2023-7123 SourceCodester Medicine Tracking System sql injection — Medicine Tracking System CWE-89 6.3 Medium 2023-12-27

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.