SourceCodester kayıtları
sourcecodester üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-28303İstismar yok | Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/iCWE-89 | Kritik9,8 | — | %0,5 | 19 Mar 2024 |
36İzleyin | CVE-2019-18417İstismar yok | Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code executionsourcecodester · restaurant management system · CWE-434 | Yüksek8,8 | — | %1,7 | 24 Eki 2019 |
36İzleyin | CVE-2024-33294İstismar yok | An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the _FAILE variableCWE-94 | Kritik9,1 | — | %0,7 | 6 May 2024 |
35İzleyin | CVE-2019-18414İstismar yok | Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lacsourcecodester · restaurant management system · CWE-352 | Yüksek8,8 | — | %0,5 | 24 Eki 2019 |
29İzleyin | CVE-2024-33306İstismar yok | SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User.sourcecodester · laboratory management system · CWE-79 | Yüksek7,4 | — | %0,7 | 1 May 2024 |
28İzleyin | CVE-2024-34231İstismar yok | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scrsourcecodester · laboratory management system · CWE-79 | Yüksek7,1 | — | %0,5 | 14 May 2024 |
25İzleyin | CVE-2024-51430Kavram kanıtı | Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary CWE-79 | Orta6,4 | — | %0,6 | 31 Eki 2024 |
24İzleyin | CVE-2021-41728İstismar yok | Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles.sourcecodester · news247 cms · CWE-79 | Orta6,1 | — | %0,6 | 28 Eki 2021 |
24İzleyin | CVE-2024-34230İstismar yok | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scrsourcecodester · laboratory management system · CWE-79 | Orta6,1 | — | %0,5 | 14 May 2024 |
24İzleyin | CVE-2024-33305İstismar yok | SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Middle Name" parameter in Create User.sourcecodester · laboratory management system · CWE-79 | Orta6,1 | — | %0,4 | 2 May 2024 |
22İzleyin | CVE-2025-6160İstismar yok | SourceCodester Client Database Management System user_customer_create_order.php sql injectionsourcecodester · downloading client database management system · CWE-74 | Orta5,5 | — | %0,6 | 17 Haz 2025 |
21İzleyin | CVE-2024-33307İstismar yok | SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter in Create User.sourcecodester · laboratory management system · CWE-79 | Orta5,4 | — | %0,4 | 1 May 2024 |
- CVE-2024-2830339İzleyin
Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/i
KritikCVSS 9,8İstismar yokEPSS %119 Mar 2024
- CVE-2019-1841736İzleyin
Sourcecodester Restaurant Management System 1.0 allows an authenticated attacker to upload arbitrary files that can result in code execution
YüksekCVSS 8,8İstismar yokEPSS %2sourcecodester · restaurant management system24 Eki 2019
- CVE-2024-3329436İzleyin
An issue in Library System using PHP/MySQli with Source Code V1.0 allows a remote attacker to execute arbitrary code via the _FAILE variable
KritikCVSS 9,1İstismar yokEPSS %16 May 2024
- CVE-2019-1841435İzleyin
Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lac
YüksekCVSS 8,8İstismar yokEPSS %0sourcecodester · restaurant management system24 Eki 2019
- CVE-2024-3330629İzleyin
SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter in Create User.
YüksekCVSS 7,4İstismar yokEPSS %1sourcecodester · laboratory management system1 May 2024
- CVE-2024-3423128İzleyin
A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr
YüksekCVSS 7,1İstismar yokEPSS %0sourcecodester · laboratory management system14 May 2024
- CVE-2024-5143025İzleyin
Cross Site Scripting vulnerability in online diagnostic lab management system using php v.1.0 allows a remote attacker to execute arbitrary
OrtaCVSS 6,4Kavram kanıtıEPSS %131 Eki 2024
- CVE-2021-4172824İzleyin
Cross Site Scripting (XSS) vulnerability exists in Sourcecodester News247 CMS 1.0 via the search function in articles.
OrtaCVSS 6,1İstismar yokEPSS %1sourcecodester · news247 cms28 Eki 2021
- CVE-2024-3423024İzleyin
A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scr
OrtaCVSS 6,1İstismar yokEPSS %0sourcecodester · laboratory management system14 May 2024
- CVE-2024-3330524İzleyin
SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Middle Name" parameter in Create User.
OrtaCVSS 6,1İstismar yokEPSS %0sourcecodester · laboratory management system2 May 2024
- CVE-2025-616022İzleyin
SourceCodester Client Database Management System user_customer_create_order.php sql injection
OrtaCVSS 5,5İstismar yokEPSS %1sourcecodester · downloading client database management system17 Haz 2025
- CVE-2024-3330721İzleyin
SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "Last Name" parameter in Create User.
OrtaCVSS 5,4İstismar yokEPSS %0sourcecodester · laboratory management system1 May 2024