CVE-2023-2594

CVE-2023-2594 https://vulners.com/cve/CVE-2023-2594 在SourceCodester Food Ordering Management System 1.0中发现了一个被归类为严重的漏洞。受影响的是组件Registration的未知功能。对参数username的操作导致了SQL注入。攻击可以远程发起。该漏洞的标识符为VDB-228396。...

EUVD-2026-91626

A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/newannouncement.php of the component Announcement Module. The manipulation of the argument title/announcement results in cross site scripting. It is...

CVE-2026-104612

The SourceCodester Student Result Management System 1.0 contains a Cross-Site Scripting (XSS) vulnerability within the Announcement Module . The flaw is located in the script/academic/core/new_announcement.php file, where the manipulation of the title/announcement argument allows for remote execu...

CVE-2026-104123

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

EUVD-2026-91164

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2026-104123

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to SQL injection due to an unknown functionality in the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. By manipulating the Title argument, an attacker can execute arbitrary SQL commands. This...

PT-2026-104072

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer 0/admins/assessments/activities/btn functions.php?action=activity. The manipulation of the argument Title results in sql injection...

CVE-2021-46005

CVE-2021-46005 关于 CVE-2021-46005 的所有详细信息 软件：Online Car Rental System 1.0 软件链接：https://www.sourcecodester.com/cc/14145/online-car-rental-system-using-phpmysql.html 漏洞类型：存储型跨站脚本（Stored Cross Site Scripting） 受影响组件：post-avehical 页面中的 vehicalorcview 拒绝服务影响：是 代码执行影响：是 攻击类型：远程 产品供应商：Sourcecodester 描述：...

CVE-disclosures

CVE-2026-3171 与 CVE-2026-3170 – Archana M 由 Archana M 发布的官方漏洞披露。 🔹 CVE-2026-3171 产品： SourceCodester / Patrick Mvuma 患者候诊区排队管理系统 1.0 漏洞类型： 跨站脚本（CWE-79） 受影响文件： /queue.php 攻击向量： 远程 用户交互： 需要 CVSS v3.1： 3.5（AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N） 状态： 已公开披露 描述 对用户输入（firstname / lastname）的中和不当，导致跨站脚本（XSS）漏...

CVE-2022-44830

建议描述 Sourcecodester Event Registration App v1.0 被发现通过 First Name、Contact 和 Remarks 字段存在多个 CSV 注入漏洞。这些漏洞允许攻击者通过精心制作的 Excel 文件执行任意代码。 附加信息 Proof of Concept: https://drive.google.com/file/d/17rSb8GLFPQfqnVFI56AYffbVMDg8z75t/view?usp=sharing Vendor Homepage:...

-CVE-2023-46450

-CVE-2023-46450 Description Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting XSS via the Add supplier function. Additional Information A video POC stored XSS vulnerability exists in the add supplier functionality in free and open source...

CVE-2022-22296

CVE-2022-22296 关于 CVE-2022-22296 的所有详情 软件：Hospital's Patient Records Management System 1.0 软件链接：https://www.sourcecodester.com/php/15116/hospitals-patient-records-management-system-php-free-source-code.html 漏洞类型：不安全的权限 - IDOR 受影响组件：Change User Function 中的 id 参数 权限提升影响：是 攻击类型：远程 产品供应商：Sourcecodest...

CVE-2024-51030

CVE-2024-51030 描述 Sourcecodester Cab Management System 1.0 的 manageclient.php 和 viewcab.php 中存在 SQL 注入漏洞，允许远程攻击者通过 id 参数执行任意 SQL 命令，从而导致未经授权的访问以及数据库中敏感数据的潜在泄露。 漏洞类型 SQL 注入 产品厂商 Sourcecodester 受影响产品代码库： https://www.sourcecodester.com/php/15180/cab-management-system-phpoop-free-source-code.html -...

CVE-2024-48427

CVE-2024-48427 描述 Sourcecodester Packers and Movers Management System v1.0 中存在一个 SQL 注入漏洞，允许远程认证用户通过 /mpms/admin/?page=services/manageservice&id 中的 id 参数执行任意 SQL 命令。 漏洞类型 SQL 注入 产品供应商 Sourcecodester 受影响产品代码库：...

CVE-2023-36158

CVE-2023-36158 Cross Site Scripting XSS vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page...

CVE-2022-3546

CVE-2022-3546 https://vulners.com/cve/CVE-2022-3546 Se encontró una vulnerabilidad en SourceCodester Simple Cold Storage Management System 1.0 y fue clasificada como problemática. Esta cuestión afecta a una funcionalidad desconocida del archivo /csms/admin/?page=user/list del componente Create Us...

duplicate-CVE-2025-4720-

cve-srms-drop-student-path-traversal CVE-2025-4720dupe SourceCodester SRMS 1.0 任意文件删除漏洞 描述 SourceCodester 学生成绩管理系统（SRMS）1.0 的 dropstudent.php 端点存在路径遍历漏洞。 该应用程序从 img GET 参数获取用户可控输入，并在未经验证的情况下直接将其传递给 unlink 函数，从而允许删除服务器上的任意文件。 漏洞代码 $img = $GET'img'; if $img == "DEFAULT" else unlink'images/students/...

CVE-2023-24203-and-CVE-2023-24204

CVE-2023-24203 和 CVE-2023-24204 介绍 在不断发展的网络安全领域中，Web应用程序仍然是攻击者试图利用漏洞的主要目标。近期，在SourceCodester Simple Customer Relationship Management CRM System v1.0中发现了两个关键漏洞：CVE-2023-24203和CVE-2023-24204。这些漏洞涉及跨站脚本（XSS）和SQL注入，带来了包括任意代码执行和未授权访问在内的重大风险。理解这些漏洞及其影响对于开发人员和安全专业人员保护系统免受潜在威胁至关重要。 跨站脚本（XSS）...