Vulnerabilities

TI-2025-12391 CVE-2025-13561 · GHSA-m5xj-m267-336w

SourceCodester Company Website CMS index.php sql injection

HIGH 72

A vulnerability was determined in SourceCodester Company Website CMS 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-11-23 No fix listed CWE-74

TI-2025-12390 CVE-2025-13560 · GHSA-5hr8-299f-p5v7

HIGH 70

A vulnerability was found in SourceCodester Company Website CMS 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00421 Published 2025-11-23 No fix listed CWE-74

TI-2025-21169 CVE-2025-29710 · GHSA-chj7-pc2g-84px

MEDIUM 60

SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00304 Published 2025-04-16 No fix listed CWE-79

TI-2025-21168 CVE-2025-29709 · GHSA-9vh5-xhwh-w9v4

MEDIUM 50

SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2025-04-16 No fix listed CWE-73

TI-2025-21167 CVE-2025-29708 · GHSA-jj4c-9qx7-h4pc

MEDIUM 50

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2025-04-16 No fix listed CWE-73