SourceCodester Online Exam Form Submission: Code-related vulnerabilities

SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A code issue vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from incorrect manipulation of the parameter img in the file /register.php, which coul...

SourceCodester Online Exam Form Submission SQL Injection Vulnerability

SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A SQL injection vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from the incorrect manipulation of the parameter usn in the file /index.php, which...

SourceCodester Online Exam Form Submission SQL Injection Vulnerability

SourceCodester Online Exam Form Submission is a SourceCodester open source online exam submission system. A SQL injection vulnerability exists in SourceCodester Online Exam Form Submission version 1.0, which stems from incorrect manipulation of the parameter phone in the file /user/dashboard.php,...

SourceCodester Hotel Reservation System SQL Injection Vulnerability

SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A SQL injection vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file deleteuser.php, which could lead t...

SourceCodester Online Student File Management SQL Injection Vulnerability

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A SQL injection vulnerability exists in SourceCodester Online Student File Management version 1.0, which originates from incorrect manipulation of the parameter studentid in the fi...

PT-2025-38220

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists due to the manipulation of the usn argument in the file /index.php. The attack can be launched remotely. The exploit has been made public...

PT-2025-38159

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A vulnerability exists in SourceCodester Online Student File Management System 1.0 related to SQL injection. The issue is located in the /admin/delete user.php file...

PT-2025-38224

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A flaw exists in SourceCodester Online Exam Form Submission that allows for unrestricted file upload. The issue is related to the manipulation of the img argument within the...

PT-2025-38225

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection issue exists due to the manipulation of the email parameter within an unknown function of the /admin/index.php file. This allows for remote exploitation. The...

PT-2025-38149

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Student File Management System version 1.0 Description: A SQL injection issue exists in the /admin/update student.php file due to manipulation of the stud id argument. This allows for remote exploitation. The exploit is...

CVE-2025-10617: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made...

SourceCodester Online Student File Management Security Vulnerabilities

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A security vulnerability exists in SourceCodester Online Student File Management version 1.0, which originates from an incorrect manipulation of the parameter studentid in the file...

SourceCodester Hotel Reservation System SQL Injection Vulnerability

SourceCodester Hotel Reservation System is a SourceCodester open source hotel reservation system. A SQL injection vulnerability exists in SourceCodester Hotel Reservation System version 1.0, which stems from incorrect manipulation of the parameter ID in the file editroomimage.php, which could lea...

SourceCodester Online Polling System SQL Injection Vulnerability

SourceCodester Online Polling System is a SourceCodester open source online polling system. A SQL injection vulnerability exists in SourceCodester Online Polling System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/positions.php, which could lead to a...

CVE-2025-10621: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Hotel Reservation System 1.0. The affected element is an unknown function of the file editroomimage.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2025-10594: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Online Student File Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletestudent.php. Executing manipulation of the argument studid can lead to sql injection. It is possible to launch the attack remotely...

CVE-2025-10593: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/updatestudent.php. Performing manipulation of the argument studid results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

CVE-2025-10623: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and...

CVE-2025-10602: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Exam Form Submission 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deletes1.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-10601: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. Affected is an unknown function of the file /admin/index.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...