Skip to content
Noroxi

SourceCodester records

12 published records for vendor sourcecodester.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2024-28303
    39Monitor

    Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/i

    CriticalCVSS 9.8No exploitEPSS 1%

    Mar 19, 2024

  • CVE-2019-18417
    36Monitor

    Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution

    HighCVSS 8.8No exploitEPSS 2%

    sourcecodester · restaurant management systemOct 24, 2019

  • CVE-2024-33294
    36Monitor

    An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the _FAILE variable

    CriticalCVSS 9.1No exploitEPSS 1%

    May 6, 2024

  • CVE-2019-18414
    35Monitor

    Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lac

    HighCVSS 8.8No exploitEPSS 0%

    sourcecodester · restaurant management systemOct 24, 2019

  • CVE-2024-33306
    29Monitor

    SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User.

    HighCVSS 7.4No exploitEPSS 1%

    sourcecodester · laboratory management systemMay 1, 2024

  • CVE-2024-34231
    28Monitor

    A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr

    HighCVSS 7.1No exploitEPSS 0%

    sourcecodester · laboratory management systemMay 14, 2024

  • CVE-2024-51430
    25Monitor

    Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary

    MediumCVSS 6.4Proof of conceptEPSS 1%

    Oct 31, 2024

  • CVE-2021-41728
    24Monitor

    Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles.

    MediumCVSS 6.1No exploitEPSS 1%

    sourcecodester · news247 cmsOct 28, 2021

  • CVE-2024-34230
    24Monitor

    A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr

    MediumCVSS 6.1No exploitEPSS 0%

    sourcecodester · laboratory management systemMay 14, 2024

  • CVE-2024-33305
    24Monitor

    SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Middle Name" parameter in Create User.

    MediumCVSS 6.1No exploitEPSS 0%

    sourcecodester · laboratory management systemMay 2, 2024

  • CVE-2025-6160
    22Monitor

    SourceCodester Client Database Management System user_customer_create_order.php sql injection

    MediumCVSS 5.5No exploitEPSS 1%

    sourcecodester · downloading client database management systemJun 17, 2025

  • CVE-2024-33307
    21Monitor

    SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter in Create User.

    MediumCVSS 5.4No exploitEPSS 0%

    sourcecodester · laboratory management systemMay 1, 2024