donbermoy records
15 published records for vendor donbermoy.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')7
- CWE-434 Unrestricted Upload of File with Dangerous Type3
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-290 Authentication Bypass by Spoofing1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
15 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-30849No exploit | Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via fdonbermoy · complete e-commerce site · CWE-98 | Critical9.8 | — | 1.1% | Apr 5, 2024 |
35Monitor | CVE-2024-2754No exploit | SourceCodester Complete E-Commerce Site users_photo.php unrestricted uploaddonbermoy · complete e-commerce site · CWE-434 | High8.8 | — | 0.8% | Mar 21, 2024 |
30Monitor | CVE-2024-2932No exploit | SourceCodester Online Chatting System update_room.php sql injectiondonbermoy · online chatting system · CWE-89 | High7.5 | — | 0.6% | Mar 26, 2024 |
29Monitor | CVE-2024-4349No exploit | SourceCodester Pisay Online E-Learning System controller.php unrestricted uploaddonbermoy · pisay online e-learning system · CWE-434 | High7.3 | — | 1.0% | Apr 30, 2024 |
27Monitor | CVE-2024-8217No exploit | SourceCodester E-Commerce Website registration.php sql injectiondonbermoy · e-commerce website · CWE-89 | Medium6.9 | — | 0.7% | Aug 27, 2024 |
27Monitor | CVE-2025-4313No exploit | SourceCodester Advanced Web Store admin_addnew_product.php sql injectiondonbermoy · advanced web store · CWE-74 | Medium6.9 | — | 0.6% | May 6, 2025 |
27Monitor | CVE-2025-4312No exploit | SourceCodester Advanced Web Store productdetail.php sql injectiondonbermoy · advanced web store · CWE-74 | Medium6.9 | — | 0.6% | May 6, 2025 |
27Monitor | CVE-2025-4314No exploit | SourceCodester Advanced Web Store index.php sql injectiondonbermoy · advanced web store · CWE-74 | Medium6.9 | — | 0.6% | May 6, 2025 |
27Monitor | CVE-2025-4504No exploit | SourceCodester Online College Library System index.php sql injectiondonbermoy · online college library system · CWE-74 | Medium6.9 | — | 0.5% | May 10, 2025 |
22Monitor | CVE-2025-9833No exploit | SourceCodester Online Farm Management System login.php sql injectiondonbermoy · online farm management system · CWE-74 | Medium5.5 | — | 0.4% | Sep 2, 2025 |
21Monitor | CVE-2024-4946No exploit | SourceCodester Online Art Gallery Management System adminHome.php unrestricted uploaddonbermoy · online art gallery management system · CWE-434 | Medium5.3 | — | 0.6% | May 16, 2024 |
16Monitor | CVE-2025-56608Proof of concept | The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in `OkHttpClientWrapper.java`donbermoy · android corona virus tracker app for india · CWE-290 | Medium4.2 | — | 0.3% | Sep 3, 2025 |
8Monitor | CVE-2025-9689No exploit | SourceCodester Advanced School Management System item_select sql injectiondonbermoy · advanced school management system · CWE-74 | Low2.1 | — | 0.3% | Aug 30, 2025 |
8Monitor | CVE-2025-9690No exploit | SourceCodester Advanced School Management System vendordetails sql injectiondonbermoy · advanced school management system · CWE-74 | Low2.1 | — | 0.3% | Aug 30, 2025 |
8Monitor | CVE-2025-9306No exploit | SourceCodester Advanced School Management System addNotice cross site scriptingdonbermoy · advanced school management system · CWE-79 | Low2.0 | — | 0.2% | Aug 21, 2025 |
- CVE-2024-3084939Monitor
Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via f
CriticalCVSS 9.8No exploitEPSS 1%donbermoy · complete e-commerce siteApr 5, 2024
- CVE-2024-275435Monitor
SourceCodester Complete E-Commerce Site users_photo.php unrestricted upload
HighCVSS 8.8No exploitEPSS 0%donbermoy · complete e-commerce siteMar 21, 2024
- CVE-2024-293230Monitor
SourceCodester Online Chatting System update_room.php sql injection
HighCVSS 7.5No exploitEPSS 0%donbermoy · online chatting systemMar 26, 2024
- CVE-2024-434929Monitor
SourceCodester Pisay Online E-Learning System controller.php unrestricted upload
HighCVSS 7.3No exploitEPSS 1%donbermoy · pisay online e-learning systemApr 30, 2024
- CVE-2024-821727Monitor
SourceCodester E-Commerce Website registration.php sql injection
MediumCVSS 6.9No exploitEPSS 0%donbermoy · e-commerce websiteAug 27, 2024
- CVE-2025-431327Monitor
SourceCodester Advanced Web Store admin_addnew_product.php sql injection
MediumCVSS 6.9No exploitEPSS 0%donbermoy · advanced web storeMay 6, 2025
- CVE-2025-431227Monitor
SourceCodester Advanced Web Store productdetail.php sql injection
MediumCVSS 6.9No exploitEPSS 0%donbermoy · advanced web storeMay 6, 2025
- CVE-2025-431427Monitor
SourceCodester Advanced Web Store index.php sql injection
MediumCVSS 6.9No exploitEPSS 0%donbermoy · advanced web storeMay 6, 2025
- CVE-2025-450427Monitor
SourceCodester Online College Library System index.php sql injection
MediumCVSS 6.9No exploitEPSS 0%donbermoy · online college library systemMay 10, 2025
- CVE-2025-983322Monitor
SourceCodester Online Farm Management System login.php sql injection
MediumCVSS 5.5No exploitEPSS 0%donbermoy · online farm management systemSep 2, 2025
- CVE-2024-494621Monitor
SourceCodester Online Art Gallery Management System adminHome.php unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%donbermoy · online art gallery management systemMay 16, 2024
- CVE-2025-5660816Monitor
The SourceCodester Android application "Corona Virus Tracker App India" 1.0 uses MD5 for digest authentication in `OkHttpClientWrapper.java`
MediumCVSS 4.2Proof of conceptEPSS 0%donbermoy · android corona virus tracker app for indiaSep 3, 2025
- CVE-2025-96898Monitor
SourceCodester Advanced School Management System item_select sql injection
LowCVSS 2.1No exploitEPSS 0%donbermoy · advanced school management systemAug 30, 2025
- CVE-2025-96908Monitor
SourceCodester Advanced School Management System vendordetails sql injection
LowCVSS 2.1No exploitEPSS 0%donbermoy · advanced school management systemAug 30, 2025
- CVE-2025-93068Monitor
SourceCodester Advanced School Management System addNotice cross site scripting
LowCVSS 2.0No exploitEPSS 0%donbermoy · advanced school management systemAug 21, 2025