CVE-2025-1587

CVE-2025-1587 affects SourceCodester Telecom Billing Management System 1.0, specifically the function addrecords in the Add New Record component (main.cpp). The vulnerability is a buffer overflow caused by manipulation of the argument name/phonenumber, with local access required to exploit. Explo...

CVE-2025-1597: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/redirect.php. The manipulation of the argument a leads to cross site scripting. It is possible to launch the attack remotely...

CVE-2025-1596: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Best Church Management Software 1.0 and classified as critical. This issue affects some unknown processing of the file /fpassword.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-1593: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in SourceCodester Best Employee Management System 1.0. This affects an unknown part of the file /hrsoft/assets/uploadImage/Profile/ of the component Profile Picture Handler. The manipulation leads to unrestricted upload. It is possible to...

CVE-2025-1592: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Best Employee Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/Operations/Role.php of the component Add Role Page. The manipulation of the argument assignname/description...

CVE-2025-1591: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Name leads to cross...

CVE-2025-1590: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester E-Learning System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. The manipulation leads to unrestricted upload. It is possible to launch the...

CVE-2025-1589: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester E-Learning System 1.0 and classified as problematic. This issue affects some unknown processing of the file /register.php of the component User Registration Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely...

CVE-2025-1587: Buffer Copy without Checking Size of Input

A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer overflow. Local acce...

PT-2025-7687 · Sourcecodester · Sourcecodester Elearning System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Learning System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /admin/modules/lesson/index.php of the component List of Lessons Page. This issue leads to unrestricted uploa...

PT-2025-7658 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.0 Description: A critical issue affects some unknown processing of the file /fpassword.php. The manipulation of the argument email leads to SQL injection. The attack may be initiated...

PT-2025-7659 · Sourcecodester · Sourcecodester Best Church Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Church Management Software version 1.0 Description: The issue concerns a cross-site scripting problem. It involves the "/admin/redirect.php" API endpoint. Recommendations: For SourceCodester Best Church Management Software...

PT-2025-7689 · Sourcecodester · Sourcecodester Best Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Employee Management System version 1.0 Description: A vulnerability was found in the Add Role Page component, specifically in the file /admin/Operations/Role.php. The issue is related to the manipulation of the assign...

PT-2025-7685 · Sourcecodester · Sourcecodester Elearning System

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Learning System version 1.0 Description: A vulnerability was found in the User Registration Handler component, specifically affecting the /register.php file. This issue leads to cross-site scripting and can be initiated...

SourceCodester – The Best Church Management Software Has a Vulnerability

SourceCodester Best Church Management Software is an open source church management software from SourceCodester. An injection vulnerability exists in SourceCodester Best Church Management Software version 1.0, which stems from an incorrect manipulation of the parameter email resulting in SQL...

SourceCodester Best Church Management Software has security vulnerabilities

SourceCodester Best Church Management Software is an open source church management software from SourceCodester. A security vulnerability exists in version 1.0 of SourceCodester Best Church Management Software, which stems from cross-site scripting due to incorrect manipulation of parameter a. Th...

SourceCodester E-Learning System Code Issues and Vulnerabilities

SourceCodester E-Learning System is a SourceCodester open source e-learning system. A code issue vulnerability exists in SourceCodester E-Learning System version 1.0, which stems from allowing unlimited file uploads...

SourceCodester’s Best Employee Management System: Code Injection Vulnerabilities

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Best Employee Management System, which originates from cross-site scripting due to incorrect manipulation of the...

SourceCodester E-Learning System Code Injection Vulnerability

SourceCodester E-Learning System is a SourceCodester open source e-learning system. A code injection vulnerability exists in SourceCodester E-Learning System version 1.0. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

SourceCodester Telecom Billing Management System security vulnerabilities

SourceCodester Telecom Billing Management System is an open source telecom billing management system from SourceCodester. A security vulnerability exists in SourceCodester Telecom Billing Management System version 1.0, which originates from a buffer overflow due to incorrect manipulation of the...