CVE-2025-4937: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be...

CVE-2025-4924: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /uservoidtransaction.php. The manipulation of the argument orderid leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-4912: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/core/updatestudent.php of the component Image File Handler. The manipulation of the argument oldphoto lea...

PT-2025-21882 · Sourcecodester · Sourcecodester Student Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A critical issue has been found in the Image File Handler component of the affected system, specifically in the file /admin/core/update student.php. The manipulation of...

PT-2025-21878 · Sourcecodester · Sourcecodester Client Database Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Client Database Management System version 1.0 Description: A critical issue was found in the software, affecting unknown code and leading to exposure of information through directory listing. The attack can be initiated remotel...

CVE-2025-4935: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Stock Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /phpaction/changePassword.php. The manipulation of the argument userid leads to sql injection. The attack may be initiated remotely. The explo...

SourceCodester Client Database Management System Injection Vulnerability

SourceCodester Client Database Management System is SourceCodester open source a client database management system . SourceCodester Client Database Management System version 1.0 has an injection vulnerability, the vulnerability stems from the operation of the parameter orderid in the file...

SourceCodester Student Result Management System Security Vulnerabilities

SourceCodester Student Result Management System is a SourceCodester open source student result management system. A security vulnerability exists in SourceCodester Student Result Management System version 1.0, which originates from a path traversal caused by the operation of the parameter oldphot...

SourceCodester Client Database Management System security vulnerabilities

SourceCodester Client Database Management System is an open source client database management system from SourceCodester. A security vulnerability exists in SourceCodester Client Database Management System version 1.0, which originates from a directory listing that leads to information disclosure...

PT-2025-21996 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /profile.php. The manipulation of the mobilenumber argument leads to SQL...

CVE-2025-4923: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /userdeliveryupdate.php. The manipulation of the argument uploadedfilecancelled leads to unrestricted upload. The attac...

CVE-2025-4909: Exposure of Information Through Directory Listing

A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. The exploit has been disclosed to t...

CVE-2025-4898

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file updatesystem.php of the component Logo File Handler. The manipulation of the argument oldlogo leads to path traversal. The...

CVE-2025-4898

CVE-2025-4898 affects SourceCodester Student Result Management System 1.0. The vulnerability resides in the Logo File Handler inside the function handling unlink in the file update_system.php, where manipulation of the argument old_logo enables a path traversal . Exploitation can be performed rem...

CVE-2025-4898 SourceCodester Student Result Management System Logo File update_system.php unlink path traversal

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file updatesystem.php of the component Logo File Handler. The manipulation of the argument oldlogo leads to path traversal. The...

CVE-2025-4898 SourceCodester Student Result Management System Logo File update_system.php unlink path traversal

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file updatesystem.php of the component Logo File Handler. The manipulation of the argument oldlogo leads to path traversal. The...

CVE-2025-4895

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. T...

CVE-2025-4895

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. T...

CVE-2025-4895

CVE-2025-4895 concerns SourceCodester Doctors Appointment System 1.0. The issue is a SQL injection caused by insecure handling of the ID/ID argument in the file /admin/delete-session.php, enabling remote exploitation. Multiple connected sources confirm the vulnerability and public disclosure of e...

CVE-2025-4895 SourceCodester Doctors Appointment System delete-session.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/delete-session.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. T...