Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 1985

Browse all 1985 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE ID Title CVSS Severity Published
CVE-2023-2345 SourceCodester Service Provider Management System improper authorization — Service Provider Management System CWE-285 6.3 Medium 2023-04-27
CVE-2023-2344 SourceCodester Service Provider Management System HTTP POST Request sql injection — Service Provider Management System CWE-89 6.3 Medium 2023-04-27
CVE-2023-2293 SourceCodester Purchase Order Management System cross site scripting — Purchase Order Management System CWE-79 2.4 Low 2023-04-25
CVE-2023-2246 SourceCodester Online Pizza Ordering System unrestricted upload — Online Pizza Ordering System CWE-434 6.3 Medium 2023-04-23
CVE-2023-2244 SourceCodester Online Eyewear Shop GET Parameter update_status.php sql injection — Online Eyewear Shop CWE-89 6.3 Medium 2023-04-22
CVE-2023-2243 SourceCodester Complaint Management System POST Parameter registration.php sql injection — Complaint Management System CWE-89 6.3 Medium 2023-04-22
CVE-2023-2242 SourceCodester Online Computer and Laptop Store GET Parameter sql injection — Online Computer and Laptop Store CWE-89 6.3 Medium 2023-04-22
CVE-2023-2219 SourceCodester Task Reminder System Users.php cross site scripting — Task Reminder System CWE-79 3.5 Low 2023-04-21
CVE-2023-2218 SourceCodester Task Reminder System manage_user.php sql injection — Task Reminder System CWE-89 6.3 Medium 2023-04-21
CVE-2023-2217 SourceCodester Task Reminder System manage_reminder.php sql injection — Task Reminder System CWE-89 6.3 Medium 2023-04-21
CVE-2023-2155 SourceCodester Air Cargo Management System cross site scripting — Air Cargo Management System CWE-79 2.4 Low 2023-04-18
CVE-2023-2154 SourceCodester Task Reminder System sql injection — Task Reminder System CWE-89 4.7 Medium 2023-04-18
CVE-2023-2153 SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting — Complaint Management System CWE-79 3.5 Low 2023-04-18
CVE-2023-2152 SourceCodester Student Study Center Desk Management System index.php file inclusion — Student Study Center Desk Management System CWE-73 5.3 Medium 2023-04-18
CVE-2023-2151 SourceCodester Student Study Center Desk Management System manage_student.php sql injection — Student Study Center Desk Management System CWE-89 6.3 Medium 2023-04-18
CVE-2023-2150 SourceCodester Task Reminder System Master.php sql injection — Task Reminder System CWE-89 4.7 Medium 2023-04-18
CVE-2023-2130 SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection — Purchase Order Management System CWE-89 6.3 Medium 2023-04-17
CVE-2023-2108 SourceCodester Judging Management System edit_contestant.php sql injection — Judging Management System CWE-89 6.3 Medium 2023-04-16
CVE-2023-2100 SourceCodester Vehicle Service Management System index.php cross site scripting — Vehicle Service Management System CWE-79 3.5 Low 2023-04-15
CVE-2023-2099 SourceCodester Vehicle Service Management System Users.php cross site scripting — Vehicle Service Management System CWE-79 3.5 Low 2023-04-15
CVE-2023-2098 SourceCodester Vehicle Service Management System topBarNav.php cross site scripting — Vehicle Service Management System CWE-79 3.5 Low 2023-04-15
CVE-2023-2097 SourceCodester Vehicle Service Management System Master.php sql injection — Vehicle Service Management System CWE-89 6.3 Medium 2023-04-15
CVE-2023-2096 SourceCodester Vehicle Service Management System manage_inventory.php sql injection — Vehicle Service Management System CWE-89 6.3 Medium 2023-04-15
CVE-2023-2095 SourceCodester Vehicle Service Management System manage_category.php sql injection — Vehicle Service Management System CWE-89 6.3 Medium 2023-04-15
CVE-2023-2094 SourceCodester Vehicle Service Management System manage_mechanic.php sql injection — Vehicle Service Management System CWE-89 6.3 Medium 2023-04-15
CVE-2023-2093 SourceCodester Vehicle Service Management System Login.php sql injection — Vehicle Service Management System CWE-89 6.3 Medium 2023-04-15
CVE-2023-2092 SourceCodester Vehicle Service Management System view_service.php sql injection — Vehicle Service Management System CWE-89 6.3 Medium 2023-04-15
CVE-2023-2090 SourceCodester Employee and Visitor Gate Pass Logging System GET Parameter view_designation.php sql injection — Employee and Visitor Gate Pass Logging System CWE-89 6.3 Medium 2023-04-15
CVE-2023-2089 SourceCodester Complaint Management System GET Parameter userprofile.php sql injection — Complaint Management System CWE-89 6.3 Medium 2023-04-15
CVE-2023-1988 SourceCodester Online Computer and Laptop Store cross site scripting — Online Computer and Laptop Store CWE-79 3.5 Low 2023-04-11

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.