SourceCodester Stock Management System security vulnerabilities

SourceCodester Stock Management System is an open source inventory management system from SourceCodester. A security vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

SourceCodester Stock Management System Injection Vulnerability

SourceCodester Stock Management System is a SourceCodester open source inventory management system. An injection vulnerability exists in SourceCodester Stock Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter ID in the file...

CVE-2025-4787: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester/oretnom23 Stock Management System 1.0. Affected is an unknown function of the file /admin/?page=sales/viewsale. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-4782: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /sms/admin/?page=receiving/viewreceiving&id=1. The manipulation of the argument ID leads to sql injection. The attack can be...

CVE-2025-4807: Exposure of Information Through Directory Listing

A vulnerability, which was classified as problematic, was found in SourceCodester Online Student Clearance System 1.0. This affects an unknown part. The manipulation leads to exposure of information through directory listing. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4728

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-4728 SourceCodester Best Online News Portal search.php sql injection

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-4728 SourceCodester Best Online News Portal search.php sql injection

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-4728

The CVE applies to SourceCodester Best Online News Portal 1.0, where an SQL injection is possible via the searchtitle parameter in /search.php. The root cause is a manipulation of the searchtitle input, enabling remote exploitation without authentication. Exploitation has been disclosed publicly....

CVE-2025-4720

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/dropstudent.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely...

CVE-2025-4720 SourceCodester Student Result Management System drop_student.php path traversal

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/dropstudent.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely...

CVE-2025-4720

The CVE-2025-4720 entry concerns SourceCodester Student Result Management System 1.0, with a path traversal vulnerability in the file academic/core/drop_student.php. The issue arises from unsafely handling the img parameter, allowing an attacker to traverse the filesystem and potentially access r...

CVE-2025-4720 SourceCodester Student Result Management System drop_student.php path traversal

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/dropstudent.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely...

CVE-2025-44185

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery CSRF in /admin/changepass.php via the password parameter...

CVE-2025-44185

SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery CSRF in /admin/changepass.php via the password parameter...

SourceCodester Student Result Management System Path Traversal Vulnerability

SourceCodester Student Result Management System is a SourceCodester open source student result management system. SourceCodester Student Result Management System version 1.0 has a path traversal vulnerability, the vulnerability stems from the wrong operation of the parameter img in the file...

PT-2025-21584 · Unknown · Sourcecodester Best Online News Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /search.php. The manipulation of the searchtitle argument leads to SQL injection. This issue can be...

PT-2025-21289 · Sourcecodester · Sourcecodester Best Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version V1.0 Description: The issue concerns a Cross Site Request Forgery CSRF in the /admin/change pass.php endpoint via the password parameter. This allows for potential unauthorized password...

CVE-2025-4720: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file academic/core/dropstudent.php. The manipulation of the argument img leads to path traversal. The attack can be initiated remotely...

CVE-2025-4728: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Online News Portal 1.0. It has been classified as critical. Affected is an unknown function of the file /search.php. The manipulation of the argument searchtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has...