SourceCodester vulnerabilities
We track 1,410 vulnerabilities in SourceCodester products across 60+ products. 1,410 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest SourceCodester vulnerabilities
- 7.2 High severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function save_brand of the file /classes/Master.php?f=save_brand. The manipulation of the argument name leads to sq
- 9.8 Critical severity
Complaint Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/check_availability.php of the component POST Parameter Handler. The manipulation of the argument emai
- 9.8 Critical severity
Sales Tracker Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/products/manage_product.php of the component GET Parameter Handler. The mani
- 9.8 Critical severity
Online Eyewear Shop: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/manage_stock.php of the component GET Parameter Handler. The manipulation of the argument id leads
- 9.8 Critical severity
Best Online News Portal: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the a
- 8.8 High severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injectio
- 8.8 High severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of the file /classes/Master.php?f=save_category. The manipulation of the argument category leads to sql in
- 9.8 Critical severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file /classes/Master.php?f=delete_sub_category. The manipulation of the argument id leads to sql injection.
- 8.8 High severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknown functionality of the file /classes/Master.php?f=save_sub_category of the component Subcategory Hand
- 8.8 High severity
Online Computer and Laptop Store: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=delete_img of the component Image Handler. The manipulation of
- 9.8 Critical severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected is an unknown function of the file login.php of the component User Registration. The manipulation of the argument email leads to sql injectio
- 8.8 High severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been rated as critical. This issue affects the function save_inventory of the file /admin/product/manage.php. The manipulation of the argument id leads to sql injection. T
- 8.8 High severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/sales/index.php. The manipulation of the argument date_start/date_end leads to sql in
- 9.8 Critical severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as critical. This affects an unknown part of the file /?p=products of the component Product Search. The manipulation of the argument search leads to sql in
- 9.8 Critical severity
Online Computer and Laptop Store: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this issue is the function delete_brand of the file /admin/maintenance/brand.php. The manipulation of the argument id leads to sql injectio
- 9.8 Critical severity
Online Computer and Laptop Store: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/?page=user of the component Avatar Handler. The manipulation leads t
- 9.8 Critical severity
Simple and Beautiful Shopping Cart System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql
- 9.1 Critical severity
Simple and Beautiful Shopping Cart System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0. This vulnerability affects unknown code of the file delete_user_query.php. The manipulation of the argument user_id leads to sql injection. The at
- 9.8 Critical severity
Simple Mobile Comparison Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/view_category.php of the component GET Parameter Handler. The manipulation of th
- 7.5 High severity
Earnings and Expense Tracker App: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic. This affects an unknown part of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible t
- 9.8 Critical severity
Air Cargo Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/transactions/track_shipment.php of the component GET Parameter Handler. T
- 9.8 Critical severity
A vulnerability, which was classified as problematic, was found in SourceCodester Online…
A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely.
- 9.8 Critical severity
Online Payroll System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attac
- 9.8 Critical severity
Online Payroll System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cashadvance_row.php. The manipulation of the argument id leads to sql injecti
- 9.8 Critical severity
Online Payroll System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Payroll System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/attendance_row.php. The manipulation of the argument id leads to sql injection. It is possible to laun
- 9.8 Critical severity
Online Payroll System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Online Payroll System 1.0 and classified as critical. This issue affects some unknown processing of the file attendance.php. The manipulation of the argument employee leads to sql injection. The attack may be initiat
- 9.8 Critical severity
Online Payroll System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Online Payroll System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/deduction_row.php. The manipulation of the argument id leads to sql injection. The attack can be i
- 9.8 Critical severity
Online Payroll System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate t
- 9.8 Critical severity
Centralized Covid Vaccination Records System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Centralized Covid Vaccination Records System 1.0 and classified as critical. This vulnerability affects unknown code of the file /vaccinated/admin/maintenance/manage_location.php of the component GET Parameter H
- 9.8 Critical severity
Online Computer and Laptop Store: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file php-ocls\admin\system_info\index.php. The manipulation of the argument img leads to unrestricted uploa
- 9.8 Critical severity
Police Crime Record Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /officer/assigncase.php of the component GET Parameter Handler. The manipulation of the argument
- 9.8 Critical severity
Simple Mobile Comparison Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/manage_field.php of the component GET Parameter Handler. The manipulatio
- 9.8 Critical severity
Simple Task Allocation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. T
- 7.5 High severity
Simple Task Allocation System: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to information disclosure. It is possible to
- 9.8 Critical severity
Earnings and Expense Tracker App: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to lau
- 9.8 Critical severity
Grade Point Average GPA Calculator: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulnerability is the function get_scale of the file Master.php. The manipulation of the argument perc leads to sql injection. T
- 7.5 High severity
Grade Point Average GPA Calculator: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page with the input php://filter/read=convert.base
- 9.8 Critical severity
Air Cargo Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manage_user.php of the component GET Parameter Handler. The manipulation of the argument id
- 9.8 Critical severity
Simple and Beautiful Shopping Cart System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in SourceCodester Simple and Beautiful Shopping Cart System 1.0 and classified as critical. This issue affects some unknown processing of the file upload.php. The manipulation leads to unrestricted upload. The attack may be initiated
- 9.8 Critical severity
Young Entrepreneur E-Negosyo System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0 and classified as critical. This vulnerability affects unknown code of the file index.php?q=product. The manipulation of the argument search leads to sql injection. The at