20154 matches found
CVE-2026-36920
The SourceCodester Online Reviewer System v1.0 is vulnerable to SQL Injection within the file /system/system/admins/assessments/examproper/questions-view.php. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. While the CVSS v3.1 score is 2.7 (...
CVE-2026-36873: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadadmin.php...
CVE-2026-36946
CVE-2026-36946 affects Sourcecodester Computer and Mobile Repair Shop Management System v1.0. The vulnerability is an SQL injection in the file /rsms/admin/inquiries/view_details.php. The CVSS v3.1 data in the sources indicates: Network attack vector, low confidentiality impact, no integrity/avai...
CVE-2026-36942: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manageactivity.php...
SourceCodester Online Reviewer System security vulnerabilities
The SourceCodester Online Reviewer System is an open-source online review system developed by SourceCodester. Version 1.0 of the SourceCodester Online Reviewer System contains a security vulnerability, which stems from an SQL injection vulnerability in the...
PT-2026-32372
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage room.php...
CVE-2026-36937
Sourcecodester Online Resort Management System v1.0 is vulnerable to an SQL injection flaw within the /orms/admin/reservations/view_details.php file. This vulnerability arises from the improper neutralization of special elements used in an SQL command. While the specific technical impact and reme...
SourceCodester Computer and Mobile Repair Shop Management system security vulnerabilities
The SourceCodester Computer and Mobile Repair Shop Management system is a simple PHP project open source by SourceCodester. It provides a website that displays information about the store. This project also manages customers’ repair records; if their devices have been repaired or serviced,...
PT-2026-32393
A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=delete sales. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and...
CVE-2026-36947: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/viewservice.php...
CVE-2026-36923
Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/viewbooking.php...
SourceCodester Computer and Mobile Repair Shop Management system security vulnerabilities
The SourceCodester Computer and Mobile Repair Shop Management system is a simple PHP project open source by SourceCodester. It provides a website that displays information about the store. This project also manages customers’ repair records; if their devices have been repaired or serviced,...
SourceCodester Computer and Mobile Repair Shop Management system security vulnerabilities
The SourceCodester Computer and Mobile Repair Shop Management system is a simple PHP project open source by SourceCodester. It provides a website that displays information about the store. This project also manages customers’ repair records; if their devices have been repaired or serviced,...
CVE-2026-36873
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/loadadmin.php...
CVE-2026-36952: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/managecurriculum.php...
CVE-2026-36943: Improper Neutralization of Special Elements used in an SQL Command
Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/managerepair.php...
CVE-2026-36937
Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/viewdetails.php...
PT-2026-32400
A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...