Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 1985

Browse all 1985 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE ID Title CVSS Severity Published
CVE-2023-0673 SourceCodester Online Eyewear Shop sql injection — Online Eyewear Shop CWE-89 5.0 Medium 2023-02-04
CVE-2023-0571 SourceCodester Canteen Management System Add Customer createcustomer.php cross site scripting — Canteen Management System CWE-79 3.5 Low 2023-01-29
CVE-2023-0570 SourceCodester Online Tours & Travels Management System payment_operation.php sql injection — Online Tours & Travels Management System CWE-89 6.3 Medium 2023-01-29
CVE-2023-0561 SourceCodester Online Tours & Travels Management System s.php sql injection — Online Tours & Travels Management System CWE-89 6.3 Medium 2023-01-28
CVE-2023-0560 SourceCodester Online Tours & Travels Management System practice_pdf.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-28
CVE-2023-0534 SourceCodester Online Tours & Travels Management System expense_report.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-27
CVE-2023-0533 SourceCodester Online Tours & Travels Management System expense_report.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-27
CVE-2023-0532 SourceCodester Online Tours & Travels Management System disapprove_user.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-27
CVE-2023-0531 SourceCodester Online Tours & Travels Management System booking_report.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-27
CVE-2023-0530 SourceCodester Online Tours & Travels Management System approve_user.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-27
CVE-2023-0529 SourceCodester Online Tours & Travels Management System add_payment.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-27
CVE-2023-0528 SourceCodester Online Tours & Travels Management System abc.php sql injection — Online Tours & Travels Management System CWE-89 4.7 Medium 2023-01-27
CVE-2023-0516 SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection — Online Tours & Travels Management System CWE-89 5.5 Medium 2023-01-26
CVE-2023-0515 SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection — Online Tours & Travels Management System CWE-89 5.5 Medium 2023-01-26
CVE-2023-0332 SourceCodester Online Food Ordering System manage_user.php sql injection — Online Food Ordering System CWE-89 7.3 High 2023-01-17
CVE-2023-0324 SourceCodester Online Tours & Travels Management System page-login.php sql injection — Online Tours & Travels Management System CWE-89 7.3 High 2023-01-16
CVE-2023-0305 SourceCodester Online Food Ordering System Login Module admin_class.php sql injection — Online Food Ordering System CWE-89 6.3 Medium 2023-01-15
CVE-2023-0304 SourceCodester Online Food Ordering System Signup Module admin_class.php sql injection — Online Food Ordering System CWE-89 6.3 Medium 2023-01-15
CVE-2023-0303 SourceCodester Online Food Ordering System view_prod.php sql injection — Online Food Ordering System CWE-89 6.3 Medium 2023-01-15
CVE-2023-0283 SourceCodester Online Flight Booking Management System POST Parameter review_search.php sql injection — Online Flight Booking Management System CWE-89 6.3 Medium 2023-01-13
CVE-2023-0281 SourceCodester Online Flight Booking Management System judge_panel.php sql injection — Online Flight Booking Management System CWE-89 6.3 Medium 2023-01-13
CVE-2023-0258 SourceCodester Online Food Ordering System Category List cross site scripting — Online Food Ordering System CWE-79 2.4 Low 2023-01-12
CVE-2023-0257 SourceCodester Online Food Ordering System Menu Form unrestricted upload — Online Food Ordering System CWE-434 4.7 Medium 2023-01-12
CVE-2023-0256 SourceCodester Online Food Ordering System Login Page sql injection — Online Food Ordering System CWE-89 6.3 Medium 2023-01-12
CVE-2023-0245 SourceCodester Online Flight Booking Management System add_contestant.php sql injection — Online Flight Booking Management System CWE-89 6.3 Medium 2023-01-12
CVE-2022-2666 SourceCodester Loan Management System login.php sql injection — Loan Management System CWE-89 6.3 Medium 2023-01-07
CVE-2022-1102 SourceCodester Royale Event Management System companyprofile.php cross site scripting — Royale Event Management System CWE-79 4.3 Medium 2023-01-07
CVE-2022-1101 SourceCodester Royale Event Management System userregister.php improper authentication — Royale Event Management System CWE-287 7.3 High 2023-01-07
CVE-2022-4855 SourceCodester Lead Management System login.php sql injection — Lead Management System CWE-89 7.3 High 2022-12-30
CVE-2022-4739 SourceCodester School Dormitory Management System Admin Login sql injection — School Dormitory Management System CWE-89 7.3 High 2022-12-25

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.