CVE-2024-50766

SourceCodester Survey Application System 1.0 is vulnerable to SQL Injection due to improper neutralization of special elements in the id parameter of the takeSurvey.php page. An attacker can exploit this vulnerability to interact with the underlying database. To mitigate this risk, it is recommen...

CVE-2025-12929

SourceCodester Survey Application System 1.0 contains a SQL injection flaw in the save_user/update_user function of /LoginRegistration.php. Manipulating the fullname argument can enable remote exploitation; other parameters may also be affected. Exploitation has been published. Remediation guidan...

CVE-2025-13060

CVE-2025-13060 affects SourceCodester Survey Application System 1.0. The issue is a SQL injection in the function handling the parameter ID in the file /view_survey.php. It can be exploited remotely, and multiple sources note that the exploit has been publicly disclosed. The vulnerability’s sever...