Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

SourceCodester — Vulnerabilities & Security Advisories 1769

Browse all 1769 CVE security advisories affecting SourceCodester. AI-powered Chinese analysis, POCs, and references for each vulnerability.

SourceCodester operates as a repository for free and premium source code, scripts, and web applications, primarily serving developers seeking ready-made solutions for rapid deployment. This business model inherently exposes users to significant security risks, as the platform hosts thousands of projects with varying levels of code review. Historically, vulnerabilities found in these downloads frequently include Remote Code Execution (RCE), Cross-Site Scripting (XSS), and SQL Injection, often stemming from outdated frameworks or unpatched dependencies. Privilege escalation flaws are also common, allowing attackers to bypass authentication mechanisms. While SourceCodester does not typically manage post-download security patches, the sheer volume of recorded CVEs highlights systemic issues in code quality assurance. Users relying on these resources must perform rigorous independent security audits, as the platform’s primary focus remains distribution rather than comprehensive vulnerability management or remediation support.

CVE IDTitleCVSSSeverityPublished
CVE-2023-1058 SourceCodester Doctors Appointment System create-account.php sql injection — Doctors Appointment SystemCWE-89 7.3 High2023-02-27
CVE-2023-1057 SourceCodester Doctors Appointment System login.php edoc sql injection — Doctors Appointment SystemCWE-89 5.5 Medium2023-02-27
CVE-2023-1056 SourceCodester Doctors Appointment System patient.php sql injection — Doctors Appointment SystemCWE-89 6.3 Medium2023-02-27
CVE-2023-1054 SourceCodester Music Gallery Site sql injection — Music Gallery SiteCWE-89 4.7 Medium2023-02-27
CVE-2023-1053 SourceCodester Music Gallery Site view_category.php sql injection — Music Gallery SiteCWE-89 4.7 Medium2023-02-27
CVE-2023-1042 SourceCodester Online Pet Shop We App update_status.php cross site scripting — Online Pet Shop We AppCWE-79 3.5 Low2023-02-26
CVE-2023-1041 SourceCodester Simple Responsive Tourism Website rate_review.php cross site scripting — Simple Responsive Tourism WebsiteCWE-79 3.5 Low2023-02-26
CVE-2023-1040 SourceCodester Online Graduate Tracer System add_acc.php sql injection — Online Graduate Tracer SystemCWE-89 6.3 Medium2023-02-26
CVE-2023-1039 SourceCodester Class and Exam Timetabling System POST Parameter index3.php sql injection — Class and Exam Timetabling SystemCWE-89 7.3 High2023-02-26
CVE-2023-1038 SourceCodester Online Reviewer Management System questions-view.php sql injection — Online Reviewer Management SystemCWE-89 6.3 Medium2023-02-26
CVE-2023-1037 SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection — Dental Clinic Appointment Reservation SystemCWE-89 7.3 High2023-02-26
CVE-2023-1036 SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scripting — Dental Clinic Appointment Reservation SystemCWE-79 4.3 Medium2023-02-26
CVE-2023-1035 SourceCodester Clinics Patient Management System update_user.php sql injection — Clinics Patient Management SystemCWE-89 6.3 Medium2023-02-25
CVE-2023-1030 SourceCodester/code-projects Online Boat Reservation System POST Parameter login.php cross site scripting — Online Boat Reservation SystemCWE-79 3.5 Low2023-02-24
CVE-2023-1006 SourceCodester Medical Certificate Generator App New Record cross site scripting — Medical Certificate Generator AppCWE-79 3.5 Low2023-02-24
CVE-2023-0999 SourceCodester Sales Tracker Management System cross-site request forgery — Sales Tracker Management SystemCWE-352 4.3 Medium2023-02-24
CVE-2023-0998 SourceCodester Alphaware Simple E-Commerce System Payment summary.php access control — Alphaware Simple E-Commerce SystemCWE-284 6.5 Medium2023-02-24
CVE-2023-0997 SourceCodester Moosikay E-Commerce System POST Parameter order.php sql injection — Moosikay E-Commerce SystemCWE-89 7.3 High2023-02-24
CVE-2023-0988 SourceCodester Online Pizza Ordering System cross-site request forgery — Online Pizza Ordering SystemCWE-352 4.3 Medium2023-02-23
CVE-2023-0987 SourceCodester Online Pizza Ordering System cross site scripting — Online Pizza Ordering SystemCWE-79 3.5 Low2023-02-23
CVE-2023-0986 SourceCodester Sales Tracker Management System Edit User sql injection — Sales Tracker Management SystemCWE-89 6.3 Medium2023-02-23
CVE-2023-0982 SourceCodester Yoga Class Registration System Add Class Entry sql injection — Yoga Class Registration SystemCWE-89 6.3 Medium2023-02-23
CVE-2023-0981 SourceCodester Yoga Class Registration System Delete User sql injection — Yoga Class Registration SystemCWE-89 6.3 Medium2023-02-23
CVE-2023-0980 SourceCodester Yoga Class Registration System Status Update update_status.php sql injection — Yoga Class Registration SystemCWE-89 6.3 Medium2023-02-23
CVE-2023-0966 SourceCodester Online Eyewear Shop cross site scripting — Online Eyewear ShopCWE-79 2.4 Low2023-02-22
CVE-2023-0964 SourceCodester Sales Tracker Management System view_product.php sql injection — Sales Tracker Management SystemCWE-89 5.0 Medium2023-02-22
CVE-2023-0963 SourceCodester Music Gallery Site POST Request Users.php access control — Music Gallery SiteCWE-284 7.3 High2023-02-22
CVE-2023-0962 SourceCodester Music Gallery Site GET Request Master.php sql injection — Music Gallery SiteCWE-89 6.3 Medium2023-02-22
CVE-2023-0961 SourceCodester Music Gallery Site GET Request view_music_details.php sql injection — Music Gallery SiteCWE-89 6.3 Medium2023-02-22
CVE-2023-0946 SourceCodester Best POS Management System sql injection — Best POS Management SystemCWE-89 6.3 Medium2023-02-21

This page lists every published CVE security advisory associated with SourceCodester. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.