CVE-2025-46189: Improper Neutralization of Special Elements used in an SQL Command

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

CVE-2025-46192

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userpaymentupdate.php via the orderid POST parameter...

CVE-2025-4467: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Student Clearance System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-admin.php. The manipulation of the argument id/txtfullname/txtemail/cmddesignation leads to sql injection. The attack...

CVE-2025-46193

SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...

PT-2025-20581

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The application lacks proper file extension checks, MIME type validation, and authentication when handling file uploads through the user payment update.php script...

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

SourceCodester Online Student Clearance System injection vulnerability

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. SourceCodester Online Student Clearance System version 1.0 has an injection vulnerability, the vulnerability stems from the parameter txtfullname/txtemail/cmddesignation operation in t...

CVE-2025-46188

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in superadminphpmyadmin.php...

CVE-2025-46189

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userordercustomerupdate.php via the orderid POST parameter...

CVE-2025-46191

Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...

CVE-2025-46193

The SourceCodester Client Database Management System version 1.0 is vulnerable to Remote Code Execution (RCE) . The root cause is an arbitrary file upload vulnerability located in the user_proposal_update_order.php file. An unauthenticated attacker can exploit this by uploading arbitrary files to...

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to an SQL Injection vulnerability in the user_delivery_update.php file. The root cause is the incorrect operation of the order_id POST parameter, which allows an attacker to manipulate database queries. Successful exploitation can...

PT-2025-20542

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A problematic issue has been found in the system, where the manipulation of the Username argument leads to cross-site scripting. This can be launched remotely. The issue...

CVE-2025-46190

SourceCodester Client Database Management System 1.0 is vulnerable to SQL Injection in userdeliveryupdate.php via the orderid POST parameter...

PT-2025-20580 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical issue affects the processing of the file /search-result.php, where the manipulation of the searchdata argument leads to SQL injection. This issue can be...

PT-2025-20576

Name of the Vulnerable Software and Affected Versions SourceCodester Client Database Management System version 1.0 Description The software is susceptible to a SQL Injection issue in the 'user order customer update.php' file. The issue occurs through the order id POST parameter. Exploitation of...

SourceCodester Online Student Clearance System Code Injection Vulnerability

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A code injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from cross-site scripting due to a parameter Username operation in...

CVE-2025-46191

Arbitrary File Upload in userpaymentupdate.php in SourceCodester Client Database Management System 1.0 allows unauthenticated users to upload arbitrary files via the uploadedfilecancelled field. Due to the absence of proper file extension checks, MIME type validation, and authentication, attacker...

SourceCodester Online Student Clearance System Code Injection Vulnerability

SourceCodester Online Student Clearance System is a SourceCodester open source online student management system. A code injection vulnerability exists in SourceCodester Online Student Clearance System version 1.0, which originates from cross-site scripting due to the operation of parameter Fullna...

CVE-2025-4470: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Online Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-student.php. The manipulation of the argument Fullname leads to cross site scripting. The attack can be...