EUVD-2026-124819

A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/addcategory.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/currentimage/featured/active/id results in sql...

EUVD-2026-124818

A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/updatefood.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed fr...

EUVD-2026-124817

A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file resetpassword.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carried...

Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting

Sourcecodester Car Rental Management System 1.0 is vulnerable to cross-site scripting via the vehicalorcview parameter. id: CVE-2021-46005 info: name: Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting author: cckuailong severity: medium description: Sourcecodester Car...

Garage Management System 1.0 - SQL Injection

Garage Management System 1.0 contains a SQL injection vulnerability in /login.php via manipulation of the argument username with input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT. An attacker can possibly obtain sensitive information from a database, modify data, and/or execut...

CVE-2026-127284

A security flaw exists in SourceCodester Food Ordering System 1.0 within the Admin Write Handler component. The vulnerability is located in the admin/add_category.php file, where a lack of proper input validation allows for SQL injection . An unauthenticated remote attacker can trigger this by ma...

CVE-2026-127283 SourceCodester Food Ordering System Admin Image update_food.php unrestricted upload

A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/updatefood.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed fr...

CVE-2026-127283

A vulnerability exists in the SourceCodester Food Ordering System 1.0 within the Admin Image Handler component. Specifically, an unknown functionality in the file admin/update_food.php allows for unrestricted upload when the cmd argument is manipulated. This attack can be performed remotely . The...

CVE-2026-127282

The SourceCodester Smart Attendance System with QR Code Scanner 1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The vulnerability exists within an unknown functionality of the reset_password.php file, where the application fails to properly neutralize the Username argument. This allows an...

CVE-2022-31294

CVE-2022-31294 Online Discussion Forum Site 1.0 - Account Takeover Exploit Title: Online Discussion Forum Site 1.0 - CSRF Create New/Update Existing Admin User Account Takeover Date: 2022-06-13 CVE: CVE-2022-31294 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage:...

CVE-2024-40110

Proof of Concept PoC for Unauthenticated Remote Code Execution in Sourcecodester Poultry Farm Management System v1.0 This repository contains a Proof of Concept PoC script demonstrating an unauthenticated remote code execution RCE vulnerability in Sourcecodester Poultry Farm Management System v1....

CVE-2022-22296

CVE-2022-22296 All Details about CVE-2022-22296 Software: Hospital's Patient Records Management System 1.0 Software Link: https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html Vulnerability Type: Insecure Permissions - IDOR Affected...

duplicate-CVE-2025-4720-

cve-srms-drop-student-path-traversal CVE-2025-4720dupe Arbitrary File Deletion in SourceCodester SRMS 1.0 Description A path traversal vulnerability exists in the dropstudent.php endpoint of SourceCodester Student Result Management System SRMS 1.0. The application takes user-controlled input from...

CVE-2022-45265

CVE-2022-45265 In the Sanitization Management System 1.0 distributed by sourcecodester.com curl --location --request POST 'http://localhost/php-sms/classes/Users.php?f=save' \ --form 'id="1"' \ --form 'firstname="HACKED"' \ --form 'lastname="Administrator"' \ --form 'username="admin"' \ --form...

CVE-2022-43117

Suggested description Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scripting XSS vulnerabilities via the Name, Username, Description and Site Feature parameters. Additional Information Proof Of Concept:...

CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. ...

CVE-2024-35468

CVE-2024-35468 Submitter: Kha Do Human Resource Management System 1.0 Vulnerability SQL injection Description SQL injection vulnerability in /hrm/index.php in SourceCodester Human Resource Management System 1.0 allow attackers to execute arbitrary SQL commands via the password parameters. Affecte...

CVE-2022-31296

CVE-2022-31296 Online Discussion Forum Site 1.0 - Blind SQL Injection Exploit Title: Online Discussion Forum Site 1.0 - Blind SQL Injection Date: 2022-06-13 CVE: CVE-2022-31296 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

CVE-2022-44830

Suggested description Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the First Name, Contact and Remarks fields. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file. Additional Information Proof ...

CVE-2024-8949-POC

Broken Access Control Vulnerability was discoverd in Sourcecodester Online Eyewear Shopping Website ID,Cart ID Manipulation Leads to Unwanted Item Addition and Deletion into User's Cart CVE-2024-8949 Vendor: Sourcecodester...