Priority HIGH 82
Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00814 · Published 2024-02-14 · No fix listed CWE-89
Priority HIGH 82
Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/delete-resident.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00814 · Published 2024-02-14 · No fix listed CWE-89
Priority HIGH 82
Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01101 · Published 2024-02-13 · No fix listed CWE-89
Priority HIGH 75
Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00664 · Published 2024-08-09 · No fix listed CWE-89
Priority HIGH 75
Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.php.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00814 · Published 2024-02-14 · No fix listed CWE-89
Priority HIGH 75
A vulnerability was found in SourceCodester QR Code Bookmark System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00822 · Published 2024-04-15 · No fix listed CWE-89
Priority MEDIUM 62
The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing operations.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00159 · Published 2025-11-07 · No fix listed CWE-352
Priority MEDIUM 61
A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0.
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00685 · Published 2024-04-01 · No fix listed CWE-434
Priority MEDIUM 60
Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes (Optional)" fields when creating an "Upcoming Reminder", allowing an attacker to inject arbitrary po…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00241 · Published 2025-11-07 · No fix listed CWE-79
Priority MEDIUM 60
Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) in the Enter URLs to check input field.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00355 · Published 2025-10-08 · No fix listed CWE-79
Priority MEDIUM 60
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting (XSS) in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim'…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00284 · Published 2025-10-07 · No fix listed CWE-79
Priority MEDIUM 60
A cross site scripting (XSS) vulnerability in rems FAQ Management System v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the Frequently Asked Question field in the Add FAQ function…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00488 · Published 2024-03-28 · No fix listed CWE-79
Priority MEDIUM 57
A security vulnerability has been detected in SourceCodester Link Status Checker 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.004 · Published 2025-09-14 · No fix listed CWE-918
Priority MEDIUM 57
A vulnerability was found in SourceCodester Multi Role Login System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2024-12-31 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in SourceCodester Road Accident Map Marker 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00484 · Published 2024-12-29 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in SourceCodester Drag and Drop Image Upload 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00579 · Published 2024-10-15 · No fix listed CWE-434
Priority MEDIUM 57
A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2024-10-10 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability has been found in SourceCodester Online Timesheet App 1.0 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2024-09-29 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in SourceCodester Online Timesheet App 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00532 · Published 2024-09-28 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2024-09-23 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in SourceCodester Profile Registration without Reload Refresh 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2024-09-23 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in SourceCodester PHP CRUD 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00415 · Published 2024-09-07 · No fix listed CWE-89
Priority MEDIUM 57
A vulnerability was found in SourceCodester PHP CRUD 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00401 · Published 2024-09-07 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2024-08-26 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic has been found in SourceCodester Zipped Folder Manager App 1.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00768 · Published 2024-08-26 · No fix listed CWE-434
Load more
THREATIST.IORead the docs