Skip to content
Noroxi

rems records

50 published records for vendor rems.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

50 records
  • CVE-2024-24142
    39Monitor

    Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    rems · school task managerFeb 13, 2024

  • CVE-2024-3797
    39Monitor

    SourceCodester QR Code Bookmark System sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    rems · qr code bookmark systemApr 15, 2024

  • CVE-2024-25209
    39Monitor

    Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/de

    CriticalCVSS 9.8No exploitEPSS 1%

    rems · barangay population monitoring systemFeb 14, 2024

  • CVE-2024-25211
    39Monitor

    Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.

    CriticalCVSS 9.8No exploitEPSS 1%

    rems · simple expense tracker appFeb 14, 2024

  • CVE-2024-25210
    39Monitor

    Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.ph

    CriticalCVSS 9.8No exploitEPSS 1%

    rems · simple expense tracker appFeb 14, 2024

  • CVE-2024-40472
    39Monitor

    Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via "delete-calorie.php."

    CriticalCVSS 9.8No exploitEPSS 1%

    rems · daily calories monitoring toolAug 12, 2024

  • CVE-2024-26517
    36Monitor

    SQL Injection vulnerability in School Task Manager v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to t

    CriticalCVSS 9.1No exploitEPSS 1%

    rems · school task managerMay 14, 2024

  • CVE-2025-63716
    26Monitor

    The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing

    MediumCVSS 6.5No exploitEPSS 0%

    rems · leads manager toolNov 7, 2025

  • CVE-2024-3129
    25Monitor

    SourceCodester Image Accordion Gallery App add-image.php unrestricted upload

    MediumCVSS 6.3No exploitEPSS 1%

    rems · image accordion gallery appApr 1, 2024

  • CVE-2024-27719
    24Monitor

    A cross site scripting (XSS) vulnerability in rems FAQ Management System v.1.0 allows a remote attacker to obtain sensitive information via

    MediumCVSS 6.1No exploitEPSS 0%

    rems · faq management systemMar 28, 2024

  • CVE-2024-1111
    24Monitor

    SourceCodester QR Code Login System add-user.php cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    rems · qr code login systemJan 31, 2024

  • CVE-2023-43292
    24Monitor

    Cross Site Scripting vulnerability in My Food Recipe Using PHP with Source Code v.1.0 allows a local attacker to execute arbitrary code via

    MediumCVSS 6.1No exploitEPSS 0%

    rems · my food recipeMar 12, 2024

  • CVE-2025-60313
    24Monitor

    Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting (XSS) in the Enter URLs to check input field.

    MediumCVSS 6.1No exploitEPSS 0%

    rems · link status checkerOct 8, 2025

  • CVE-2024-28276
    24Monitor

    Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.

    MediumCVSS 6.1No exploitEPSS 0%

    rems · school task managerMay 14, 2024

  • CVE-2025-60312
    24Monitor

    Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting (XSS) in the "Markdown Input" field, allowing a remot

    MediumCVSS 6.1No exploitEPSS 0%

    rems · markdown to html converterOct 7, 2025

  • CVE-2025-63640
    24Monitor

    Sourcecodester Medicine Reminder App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Medicine Name" and "Notes (Optional)" fields w

    MediumCVSS 6.1No exploitEPSS 0%

    rems · medicine reminder appNov 7, 2025

  • CVE-2024-7643
    21Monitor

    SourceCodester Leads Manager Tool Delete Leads delete-leads.php sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    rems · leads manager toolAug 12, 2024

  • CVE-2024-8170
    21Monitor

    SourceCodester Zipped Folder Manager App add-folder.php unrestricted upload

    MediumCVSS 5.3No exploitEPSS 1%

    rems · zipped folder manager appAug 26, 2024

  • CVE-2024-7644
    21Monitor

    SourceCodester Leads Manager Tool Add Leads add-leads.php cross site scripting

    MediumCVSS 5.3No exploitEPSS 1%

    rems · leads manager toolAug 12, 2024

  • CVE-2024-4967
    21Monitor

    SourceCodester Interactive Map with Marker delete-mark.php sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    rems · interactive map with markerMay 16, 2024

  • CVE-2024-7811
    21Monitor

    SourceCodester Daily Expenses Monitoring App delete-expense.php sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    rems · daily expenses monitoring appAug 14, 2024

  • CVE-2024-9975
    21Monitor

    SourceCodester Drag and Drop Image Upload upload.php unrestricted upload

    MediumCVSS 5.3No exploitEPSS 1%

    rems · drag and drop image uploadOct 15, 2024

  • CVE-2024-7792
    21Monitor

    SourceCodester Task Progress Tracker delete-task.php sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    rems · task progress trackerAug 14, 2024

  • CVE-2025-1168
    21Monitor

    SourceCodester Contact Manager with Export to VCF delete-contact.php sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    rems · contact manager with export to vcfFeb 10, 2025

  • CVE-2024-9093
    21Monitor

    SourceCodester Profile Registration without Reload Refresh GET Parameter del.php sql injection

    MediumCVSS 5.3No exploitEPSS 1%

    rems · profile registration without reload\/refreshSep 22, 2024