Vulnerabilities

TI-2026-04662 CVE-2026-5330 · GHSA-727f-vwj6-7jvh

SourceCodester/mayuri_k Best Courier Management System User Delete ajax.php access control

HIGH 70

A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00319 Published 2026-04-02 No fix listed CWE-266

TI-2026-03228 CVE-2026-3738 · GHSA-mxm9-6hj4-g563

SourceCodester Pet Grooming Management Software Financial Report improper authorization

MEDIUM 57

A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00289 Published 2026-03-08 No fix listed CWE-266

TI-2026-03227 CVE-2026-3737 · GHSA-x4fr-7g44-prw4

SourceCodester Pet Grooming Management Software User Creation add_user.php improper authorization

MEDIUM 57

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00289 Published 2026-03-08 No fix listed CWE-266

TI-2026-01666 CVE-2026-2009 · GHSA-p967-c764-24hr

SourceCodester Gas Agency Management System createUser.php access control

MEDIUM 57

A flaw has been found in SourceCodester Gas Agency Management System 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2026-02-06 No fix listed CWE-266

TI-2026-01385 CVE-2026-1702 · GHSA-j4xv-44mv-ww5h

SourceCodester Pet Grooming Management Software User Management user.php improper authorization

MEDIUM 57

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00397 Published 2026-01-30 No fix listed CWE-266

TI-2023-30021 CVE-2023-53734 · GHSA-6q4x-gx2j-mfgh

dawa-pharma-1.0 - SQL Injection via Email Parameter

HIGH 77

dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive information and potentially gain administrative access.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00568 Published 2025-12-04 No fix listed CWE-89

TI-2025-11774 CVE-2025-12853 · GHSA-7wcr-q663-xpqj

SourceCodester Best House Rental Management System admin_class.php delete_house sql injection

MEDIUM 56

A vulnerability was determined in SourceCodester Best House Rental Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00364 Published 2025-11-07 No fix listed CWE-74

TI-2025-39437 CVE-2025-63717 · GHSA-w3m4-2rp8-wq32

The change password functionality at /pet_grooming/admin/change_pass.php in…

MEDIUM 62

The change password functionality at /pet_grooming/admin/change_pass.php in SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00158 Published 2025-11-07 No fix listed CWE-352

TI-2025-11568 CVE-2025-12614 · GHSA-q9vg-vf82-hf75

SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection

MEDIUM 56

A weakness has been identified in SourceCodester Best House Rental Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00408 Published 2025-11-03 No fix listed CWE-74

TI-2025-11552 CVE-2025-12598 · GHSA-3f3r-7r2j-v7vc

SourceCodester Best House Rental Management System admin_class.php save_tenant sql injection

MEDIUM 56

A flaw has been found in SourceCodester Best House Rental Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00408 Published 2025-11-02 No fix listed CWE-74

TI-2025-11551 CVE-2025-12597 · GHSA-fv93-fmvc-4pmr

SourceCodester Best House Rental Management System admin_class.php save_category sql injection

MEDIUM 56

A vulnerability was detected in SourceCodester Best House Rental Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00408 Published 2025-11-02 No fix listed CWE-74

TI-2025-39276 CVE-2025-63298 · GHSA-h693-9mj7-pcj4

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management…

HIGH 69

A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00519 Published 2025-10-30 No fix listed CWE-24

TI-2025-11303 CVE-2025-12325 · GHSA-r8rx-j52m-ph84

SourceCodester Best Salon Management System forgot-password.php sql injection

HIGH 70

A vulnerability has been found in SourceCodester Best Salon Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00505 Published 2025-10-27 No fix listed CWE-74

TI-2025-11209 CVE-2025-12226 · GHSA-2w2q-r6q7-86fg

SourceCodester Best House Rental Management System admin_class.php save_house sql injection

MEDIUM 64

A vulnerability was found in SourceCodester Best House Rental Management System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00414 Published 2025-10-27 No fix listed CWE-74

TI-2025-11191 CVE-2025-12208 · GHSA-r4c7-v3m5-mx58

SourceCodester Best House Rental Management System admin_class.php login2 sql injection

HIGH 70

A vulnerability was found in SourceCodester Best House Rental Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00478 Published 2025-10-27 No fix listed CWE-74

TI-2025-10692 CVE-2025-11662 · GHSA-g24v-rv5m-w2g9

SourceCodester Best Salon Management System booking.php sql injection

HIGH 70

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00478 Published 2025-10-13 No fix listed CWE-74

TI-2025-10645 CVE-2025-11615 · GHSA-vmf2-c9c7-38g7

SourceCodester Best Salon Management System add_invoice.php sql injection

HIGH 70

A security flaw has been discovered in SourceCodester Best Salon Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00472 Published 2025-10-11 No fix listed CWE-74

TI-2025-10644 CVE-2025-11614 · GHSA-9r6w-j876-gr57

SourceCodester Best Salon Management System edit-appointment.php sql injection

HIGH 70

A vulnerability was identified in SourceCodester Best Salon Management System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00415 Published 2025-10-11 No fix listed CWE-74

TI-2025-37639 CVE-2025-60316 · GHSA-r3mh-p4fx-4894

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in…

HIGH 80

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00381 Published 2025-10-09 No fix listed CWE-89

TI-2025-37640 CVE-2025-60318 · GHSA-m965-73pg-36g4

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting…

MEDIUM 60

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the fname (First Name) and lname (Last Name) fields.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2025-10-08 No fix listed CWE-79

TI-2025-37907 CVE-2025-61087 · GHSA-mwjg-9qf7-mwhr

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting…

MEDIUM 60

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the Customer Name field under Customer Management Section.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2025-10-02 No fix listed CWE-79

TI-2025-10127 CVE-2025-11057 · GHSA-pc3g-4f8g-2fgc

SourceCodester Pet Grooming Management Software print_inv.php sql injection

HIGH 70

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00478 Published 2025-09-27 No fix listed CWE-74

TI-2025-10121 CVE-2025-11051 · GHSA-hfw3-gqf8-jj67

SourceCodester Pet Grooming Management Software cross-site request forgery

MEDIUM 57

A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00253 Published 2025-09-27 No fix listed CWE-352

TI-2025-09930 CVE-2025-10840 · GHSA-vm87-89vh-hvxf

SourceCodester Pet Grooming Management Software print-payment.php sql injection

HIGH 65

A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00486 Published 2025-09-23 No fix listed CWE-74

TI-2025-09929 CVE-2025-10839 · GHSA-ph7q-mhxg-qmwr

SourceCodester Pet Grooming Management Software inv-print.php sql injection

HIGH 65

A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00486 Published 2025-09-23 No fix listed CWE-74

Vulnerabilities

Filters