Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

SourceCodester — Vulnerabilities & Security Advisories 2050

Browse all 2050 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

Found 30 results / 2050 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-10255 SourceCodester Pharmacy Sales and Inventory System ShowForm.php sell_statement access control — Pharmacy Sales and Inventory System CWE-284 5.3 Medium 2026-06-01
CVE-2026-10248 SourceCodester Pharmacy Sales and Inventory System Supplier Creation export create_supplier csv injection — Pharmacy Sales and Inventory System CWE-1236 4.7 Medium 2026-06-01
CVE-2026-10247 SourceCodester Pharmacy Sales and Inventory System main create_generic_name cross site scripting — Pharmacy Sales and Inventory System CWE-79 3.5 Low 2026-06-01
CVE-2026-10246 SourceCodester Pharmacy Sales and Inventory System main create_medicine_presentation cross site scripting — Pharmacy Sales and Inventory System CWE-79 3.5 Low 2026-06-01
CVE-2026-10245 SourceCodester Pharmacy Sales and Inventory System main create_supplier cross site scripting — Pharmacy Sales and Inventory System CWE-79 3.5 Low 2026-06-01
CVE-2026-10244 SourceCodester Pharmacy Sales and Inventory System main create_medicine_name cross site scripting — Pharmacy Sales and Inventory System CWE-79 3.5 Low 2026-06-01
CVE-2026-8136 SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting — Pharmacy Sales and Inventory System CWE-79 2.4 Low 2026-05-08
CVE-2026-8083 SourceCodester Pharmacy Sales and Inventory System ajax.php save_user sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-05-07
CVE-2026-7550 SourceCodester Pharmacy Sales and Inventory System ajax.php save_customer sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-05-01
CVE-2026-7549 SourceCodester Pharmacy Sales and Inventory System ajax.php delete_customer sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-05-01
CVE-2026-7392 SourceCodester Pharmacy Sales and Inventory System ajax.php delete_supplier sql injection — Pharmacy Sales and Inventory System CWE-89 6.3 Medium 2026-04-29
CVE-2026-7391 SourceCodester Pharmacy Sales and Inventory System ajax.php save_supplier sql injection — Pharmacy Sales and Inventory System CWE-89 6.3 Medium 2026-04-29
CVE-2026-7390 SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting — Pharmacy Sales and Inventory System CWE-79 3.5 Low 2026-04-29
CVE-2026-7283 SourceCodester Pharmacy Sales and Inventory System ajax.php save_expired sql injection — Pharmacy Sales and Inventory System CWE-89 4.7 Medium 2026-04-28
CVE-2026-7282 SourceCodester Pharmacy Sales and Inventory System ajax.php delete_expired sql injection — Pharmacy Sales and Inventory System CWE-89 4.7 Medium 2026-04-28
CVE-2026-7281 SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting — Pharmacy Sales and Inventory System CWE-79 2.4 Low 2026-04-28
CVE-2026-7269 SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting — Pharmacy Sales and Inventory System CWE-79 2.4 Low 2026-04-28
CVE-2026-7200 SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting — Pharmacy Sales and Inventory System CWE-79 4.3 Medium 2026-04-27
CVE-2026-7199 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-7194 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-7130 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-7129 SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting — Pharmacy Sales and Inventory System CWE-79 4.3 Medium 2026-04-27
CVE-2026-7128 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-7127 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-7126 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-7088 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-7087 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-27
CVE-2026-6189 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-13
CVE-2026-6188 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-13
CVE-2026-6187 SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection — Pharmacy Sales and Inventory System CWE-89 7.3 High 2026-04-13

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.