Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 2050

Browse all 2050 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

Found 18 results / 2050 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2025-1905 SourceCodester Employee Management System employee.php cross site scripting — Employee Management System CWE-79 3.5 Low 2025-03-04
CVE-2025-1591 SourceCodester Employee Management System Department Page department.php cross site scripting — Employee Management System CWE-79 2.4 Low 2025-02-23
CVE-2025-1160 SourceCodester Employee Management System index.php default credentials — Employee Management System CWE-1392 7.3 High 2025-02-10
CVE-2024-9083 SourceCodester Employee Management System add-admin.php cross site scripting — Employee Management System CWE-79 2.4 Low 2024-09-22
CVE-2024-2394 SourceCodester Employee Management System add-admin.php unrestricted upload — Employee Management System CWE-434 4.7 Medium 2024-03-12
CVE-2024-1878 SourceCodester Employee Management System myprofile.php sql injection — Employee Management System CWE-89 6.3 Medium 2024-02-26
CVE-2024-1877 SourceCodester Employee Management System cancel.php sql injection — Employee Management System CWE-89 6.3 Medium 2024-02-26
CVE-2024-1876 SourceCodester Employee Management System psubmit.php sql injection — Employee Management System CWE-89 7.3 High 2024-02-26
CVE-2024-1871 SourceCodester Employee Management System Project Assignment Report assignp.php cross site scripting — Employee Management System CWE-79 3.5 Low 2024-02-24
CVE-2024-1833 SourceCodester Employee Management System login.php sql injection — Employee Management System CWE-89 7.3 High 2024-02-23
CVE-2024-1011 SourceCodester Employee Management System Leave delete-leave.php access control — Employee Management System CWE-284 4.3 Medium 2024-01-29
CVE-2024-1010 SourceCodester Employee Management System edit-profile.php cross site scripting — Employee Management System CWE-79 3.5 Low 2024-01-29
CVE-2024-1009 SourceCodester Employee Management System login.php sql injection — Employee Management System CWE-89 7.3 High 2024-01-29
CVE-2024-1008 SourceCodester Employee Management System Profile Page edit-photo.php unrestricted upload — Employee Management System CWE-434 4.7 Medium 2024-01-29
CVE-2024-1007 SourceCodester Employee Management System edit_profile.php sql injection — Employee Management System CWE-89 6.3 Medium 2024-01-29
CVE-2022-2724 SourceCodester Employee Management System aprocess.php sql injection — Employee Management System CWE-89 6.3 Medium 2022-08-09
CVE-2022-2723 SourceCodester Employee Management System eprocess.php sql injection — Employee Management System CWE-89 6.3 Medium 2022-08-09
CVE-2022-2715 SourceCodester Employee Management System eloginwel.php sql injection — Employee Management System CWE-89 6.3 Medium 2022-08-09

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.