CVE-2026-19065: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown processing of the file uploadfiles.php. This manipulation causes unrestricted upload. The attack may be initiated remotely...

PT-2026-68670

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

CVE-2026-19064: Authorization Bypass Through User-Controlled Key

A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of the file /view.php. The manipulation of the argument ID results in authorization bypass. The attack can be launched remotely...

PT-2026-68671

Name of the Vulnerable Software and Affected Versions SourceCodester Online Examination & Learning Management System version 1.0 Description An issue exists in the processing of the 'upload files.php' endpoint, which allows for unrestricted file upload. This flaw can be exploited remotely to uplo...

CVE-2025-69948

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/deletegroup.php?id=1...

CVE-2025-69948

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. The flaw exists at the /admin/delete_group.php endpoint, specifically via the id parameter. Attackers can insert malicious SQL statements into...

EUVD-2025-210575

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/deletegroup.php?id=1...

CVE-2025-69948: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in /admin/deletegroup.php?id=1...

CVE-2025-69946: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Modern Loan Management System 1.0 is vulnerable to SQL Injection in ajaxData.php via the parameters districtid , divisionid, regionid, and wardid...

CVE-2025-69947

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

EUVD-2025-210536

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in savestud.php via the parameters fname, lname, and studentclass...

EUVD-2025-210532

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in /saveuser.php via the parameter status...

EUVD-2025-210537

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

EUVD-2025-210533

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

CVE-2025-69947: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

CVE-2025-69947

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

EUVD-2025-210563

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

CVE-2025-69941

SourceCodester Tailor Management System version 1.0 is vulnerable to SQL Injection via the id parameter in the addmeasurement.php endpoint. This vulnerability allows for the execution of malicious SQL statements, potentially impacting the confidentiality, integrity, and availability of the databa...

CVE-2025-69941: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...