PT-2025-45602

A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

SourceCodester Farm Management System SQL Injection Vulnerability

SourceCodester Farm Management System is a SourceCodester open source farm management system. A SQL injection vulnerability exists in SourceCodester Farm Management System version 1.0, which stems from an incorrect manipulation of the parameter pid in the file /review.php, which could lead to a S...

SourceCodester Food Ordering System Security Vulnerabilities

SourceCodester Food Ordering System is an open source food ordering system from SourceCodester. A security vulnerability exists in SourceCodester Food Ordering System version 1.0, which stems from an incorrect manipulation of the parameter ID in the file /view-ticket.php, which could lead to a SQ...

SourceCodester Product Expiry Management System security vulnerabilities

SourceCodester Product Expiry Management System is an open source product expiration management system from SourceCodester. A security vulnerability exists in SourceCodester Product Expiry Management System, which stems from the user management module delete-user.php relying on session cookies an...

PT-2025-46147

Name of the Vulnerable Software and Affected Versions SourceCodester Interview Management System version 1.0 Description A security flaw exists in SourceCodester Interview Management System version 1.0. The issue involves a SQL injection impacting the file '/addCandidate.php'. Manipulation of the...

PT-2025-46162

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description A Cross-Site Request Forgery CSRF issue exists in the application, potentially allowing an attacker to cause an authenticated administrative user to perform actions witho...

CVE-2025-12932: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /admin.php?id=inbox. This manipulation of the argument msgid causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2025-12929: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function saveuser/updateuser of the file /LoginRegistration.php. Executing manipulation of the argument fullname can lead to sql injection. The attack may be performed from remote. The exploit has been publish...

CVE-2025-12926: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Farm Management System 1.0. The affected element is an unknown function of the file /review.php. This manipulation of the argument pid causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the...

SourceCodester Simple To-Do List System Security Vulnerabilities

SourceCodester Simple To-Do List System is a simple to-do list system from SourceCodester open source. A security vulnerability exists in SourceCodester Simple To-Do List System version 1.0, which stems from Add Tasks text input that is not properly cleaned up or encoded for output, which could...

PT-2025-45603

A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteoptions=welcome. Such manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...

CVE-2025-63711

A Cross-Site Request Forgery CSRF vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to perform user deletion actions without their consent. The application's user deletion endpoint e.g.,...

SourceCodester Survey Application System security vulnerabilities

SourceCodester Survey Application System is an open source survey application system from SourceCodester. A security vulnerability exists in SourceCodester Survey Application System version 1.0, which stems from an incorrect manipulation of the parameter fullname in the file /LoginRegistration.ph...

CVE-2025-63710: Cross-Site Request Forgery (CSRF)

The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...

PT-2025-46163

Name of the Vulnerable Software and Affected Versions SourceCodester Product Expiry Management System affected versions not specified Description The software contains a Cross-Site Request Forgery CSRF issue within the User Management module. Specifically, the delete-user.php endpoint is...

SourceCodester Simple Public Chat Room security vulnerability

SourceCodester Simple Public Chat Room is a simple public chat room in SourceCodester open source. A security vulnerability exists in SourceCodester Simple Public Chat Room version 1.0, which stems from the sendmessage.php endpoint that does not implement a CSRF protection mechanism, which could...

SourceCodester Food Ordering System SQL Injection Vulnerability

SourceCodester Food Ordering System is a SourceCodester open source food ordering system. A SQL injection vulnerability exists in SourceCodester Food Ordering System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /routers/edit-orders.php, which could lead to ...

CVE-2025-12930: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may...

PT-2025-45596

Name of the Vulnerable Software and Affected Versions SourceCodester Survey Application System version 1.0 Description A flaw exists in the SourceCodester Survey Application System that allows for SQL injection. This occurs through manipulation of the fullname argument within the save user/update...

CVE-2025-63711

A Cross-Site Request Forgery CSRF vulnerability in the SourceCodester Client Database Management System 1.0 allows an attacker to cause an authenticated administrative user to perform user deletion actions without their consent. The application's user deletion endpoint e.g.,...