SourceCodester has 111 CVEs on record. Disclosure cadence is accelerating: 111 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 67. The median CVSS is 7.3 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-74 (64) and CWE-89 (64). Most affected products: Drug Recommendation System (17), Online Reviewer Management System (15), Class and Exam Timetabling System (11).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 111 prev 0
Products
- Drug Recommendation System 17
- Online Reviewer Management System 15
- Class and Exam Timetabling System 11
- Performance Indicator System 10
- Online Food Ordering System 7
- Syllabus-Aligned Learning Management & Examination System 7
Worst active — by depth score
CVE-2026-116060High· 7.3SourceCodester Performance Indicator System adddealer.php sql injection52CVE-2026-109620High· 7.3A vulnerability has been found in SourceCodester Online Reviewer System 1.052CVE-2026-109607High· 7.3A flaw has been found in SourceCodester Online Exam System 1.052CVE-2026-109606High· 7.3A vulnerability was detected in SourceCodester Art Gallery Management System 1.052CVE-2026-109605High· 7.3A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.052
SourceCodester vulnerabilities
CVEs affecting SourceCodester, newest first. Open any entry for full detail, references, and exploit status.
111 CVEsRSS
CVE-2026-116605Medium· 5.3SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-sid…
CVE-2026-116604Medium· 6.5PoCSourceCodester Online Food Ordering System delete_admin.php missing authentication
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is …
CVE-2026-116603Medium· 4.7SourceCodester Online Food Ordering System add_food.php unrestricted upload
A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be pe…
CVE-2026-116602Medium· 6.5SourceCodester Online Food Ordering System delete.php unlink path traversal
A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink of the file admin/delete.php. Performing a manipulation of the argument image_name results in path traversal. The atta…
CVE-2026-116055Medium· 6.3SourceCodester Performance Indicator System deleteproduct.php sql injection
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be…
CVE-2026-116060High· 7.3PoCSourceCodester Performance Indicator System adddealer.php sql injection
A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attac…
CVE-2026-116061High· 7.3SourceCodester Performance Indicator System edit_dealer.php sql injection
A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_dealer.php. The manipulation of the argument Contact leads to sql injection. The att…
CVE-2026-116062High· 7.3SourceCodester Performance Indicator System save_profile.php sql injection
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/save_profile.php. The manipulation of the argument Contact results in sql injecti…
CVE-2026-114267High· 7.3SourceCodester Food Order Management System Admin Endpoint authorization
A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote.…
CVE-2026-112096Low· 3.5PoCSourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting
A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the component Purchase Records Handler. The manipulation of …
CVE-2026-112095Low· 3.5PoCSourceCodester Inventory System Product Management products_handler.php save cross site scripting
A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the component Product Management. Executing a manipulation of the argument Product_Id/Product…
CVE-2026-112097Low· 3.5SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting
A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the component Sales Management Handler. The manipulation of the ar…
CVE-2026-109620High· 7.3PoCA vulnerability has been found in SourceCodester Online Reviewer System 1.0
A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulation of the argument username/password leads to sql inject…
CVE-2026-109607High· 7.3PoCA flaw has been found in SourceCodester Online Exam System 1.0
A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql i…
CVE-2026-109606High· 7.3PoCA vulnerability was detected in SourceCodester Art Gallery Management System 1.0
A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Account Creation. The manipulation of the argument Name resu…
CVE-2026-109605High· 7.3PoCA security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0
A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the component User Management. The manipulation of the argument Type …
CVE-2026-108975High· 7.3PoCA security flaw has been discovered in SourceCodester Library Management System 1.0
A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in u…
CVE-2026-108974High· 7.3PoCA vulnerability was identified in SourceCodester E-Learning System 1.0
A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argument img leads to unrestricted upload. The attack can be lau…
CVE-2026-108973High· 7.3PoCA vulnerability was determined in SourceCodester Contact Tracing System 1.0
A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted up…
CVE-2026-108972High· 7.3PoCA vulnerability was found in SourceCodester Human Resource Management System 1.0
A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.php of the component Employee Endpoint. The manipulation of th…
CVE-2026-108968High· 7.3PoCA weakness has been identified in SourceCodester Performance Indicator System 1.0
A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This manipulation of the argument ID causes sql injection. Remote …
CVE-2026-108967High· 7.3A security flaw has been discovered in SourceCodester Performance Indicator System 1.0
A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation of the argument credit results in sql injection. The attac…
CVE-2026-108966High· 7.3PoCA vulnerability was identified in SourceCodester Performance Indicator System 1.0
A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The att…
CVE-2026-108965High· 7.3PoCA vulnerability was determined in SourceCodester Performance Indicator System 1.0
A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injectio…
CVE-2026-108964High· 7.3PoCA vulnerability was found in SourceCodester Performance Indicator System 1.0
A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the argument prodcategory results in sql injection. The atta…
CVE-2026-108920Medium· 4.3PoCA security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0
A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user_record.php of the component Admin Record Tables. Such manipulation of the argument name/…
CVE-2026-108919Medium· 4.3PoCA weakness has been identified in SourceCodester Drug Recommendation System 1.0
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Student Registration. This manipulation of the argument txtnam…
CVE-2026-105957Medium· 6.3PoCA vulnerability was detected in SourceCodester Performance Indicator System 1.0
A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view_product.php. Performing a manipulation of the argument Category results in sql inj…
CVE-2026-105808Low· 3.5PoCA vulnerability was determined in SourceCodester Simple Student Information System 1.0
A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross sit…
CVE-2026-105809Medium· 4.3PoCA vulnerability was identified in SourceCodester Simple Student Information System 1.0
A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstna…