CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from a Services feature that does not properly validate uploaded files, which could lead to arbitrary...

SourceCodester Web-based Pharmacy Product Management System 注入漏洞

SourceCodester Web-based Pharmacy Product Management System is a SourceCodester open source Web-based pharmacy product management system. An injection vulnerability exists in SourceCodester Web-based Pharmacy Product Management System version 1.0, which results from SQL injection due to incorrect...

PT-2025-16793 · Unknown · Sourcecodester Online Id Generator System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Online ID Generator System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is achievable through the id...

CVE-2025-29709

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio...

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 is affected by a Stored Cross-Site Scripting (XSS) flaw in id_generator/classes/Users.php?f=save, triggered by the POST parameters firstname and lastname. Root cause is unescaped user input leading to script execution in the context of authenticated/u...

CVE-2024-40068

Sourcecodester Online ID Generator System 1.0 contains a SQL injection in the id parameter of id_generator/admin/?page=templates/manage_template&id=1. Root cause: improper handling of user input leading to SQL injection. Impact per available metrics is Confidentiality/Integrity/Availability Low w...

CVE-2024-40074

CVE-2024-40074 affects SourceCodester Online ID Generator System 1.0. The flaw is a Stored Cross-Site Scripting (XSS) vulnerability in id_generator/classes/SystemSettings.php?f=update_settings, with the point of vulnerability in the POST parameter short_name. CVSSv3.1 base score 4.8 (MEDIUM), net...

CVE-2025-29708

CVE-2025-29708 affects SourceCodester Company Website CMS 1.0. The vulnerability is a file upload flaw in the Create Services endpoint (/dashboard/Services) that could allow arbitrary file uploads due to improper validation. CVSS v3.1 base score 9.8 (network access, no authentication, user intera...

CVE-2025-3589

A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manageclass.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-3589

SourceCodester Music Class Enrollment System 1.0 is affected by a SQL injection in an unknown function of /manage_class.php caused by manipulation of the ID parameter. The issue can be exploited remotely, and public exploit information exists. Connected sources reiterate the vulnerability but do ...

CVE-2025-3589 SourceCodester Music Class Enrollment System manage_class.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manageclass.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-3589 SourceCodester Music Class Enrollment System manage_class.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manageclass.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2025-16272 · Unknown · Sourcecodester Music Class Enrollment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Class Enrollment System version 1.0 Description: A critical vulnerability was found in the SourceCodester Music Class Enrollment System. The issue affects an unknown function of the file /manage class.php. The manipulatio...

SourceCodester Music Class Enrollment System 安全漏洞

SourceCodester Music Class Enrollment System is an open source music class enrollment system from SourceCodester. A security vulnerability exists in SourceCodester Music Class Enrollment System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in...

CVE-2025-3383

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/searchsales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated...

CVE-2025-3315

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched...

CVE-2025-3314

A vulnerability has been found in SourceCodester Apartment Visitor Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /forgotpw.php. The manipulation of the argument secode leads to sql injection. The attack can be launched...

CVE-2025-3383

A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/searchsales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated...