SourceCodester has 111 CVEs on record. Disclosure cadence is accelerating: 111 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 67. The median CVSS is 7.3 (high). None have a confirmed exploitation report. The dominant weakness classes are CWE-74 (64) and CWE-89 (64). Most affected products: Drug Recommendation System (17), Online Reviewer Management System (15), Class and Exam Timetabling System (11).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 111 prev 0
Products
- Drug Recommendation System 17
- Online Reviewer Management System 15
- Class and Exam Timetabling System 11
- Performance Indicator System 10
- Online Food Ordering System 7
- Syllabus-Aligned Learning Management & Examination System 7
Worst active — by depth score
CVE-2026-116060High· 7.3SourceCodester Performance Indicator System adddealer.php sql injection52CVE-2026-114267High· 7.3SourceCodester Food Order Management System Admin Endpoint authorization52CVE-2026-109620High· 7.3A vulnerability has been found in SourceCodester Online Reviewer System 1.052CVE-2026-109607High· 7.3A flaw has been found in SourceCodester Online Exam System 1.052CVE-2026-109606High· 7.3A vulnerability was detected in SourceCodester Art Gallery Management System 1.052
SourceCodester vulnerabilities
CVEs affecting SourceCodester, newest first. Open any entry for full detail, references, and exploit status.
111 CVEsRSS
CVE-2026-105807High· 7.3A vulnerability was found in SourceCodester Simple Student Information System 1.0
A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely.
CVE-2026-105706Medium· 4.3PoCA weakness has been identified in SourceCodester Drug Recommendation System 1.0
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has b…
CVE-2026-105705Medium· 4.3PoCA security flaw has been discovered in SourceCodester Drug Recommendation System 1.0
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation results in cross site scripting. The attack is possible to b…
CVE-2026-105704High· 7.3PoCA vulnerability was identified in SourceCodester Drug Recommendation System 1.0
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user_id leads to improper authentication. The attack can be …
CVE-2026-105247High· 7.3PoCA vulnerability was determined in SourceCodester Online Reviewer Management System 1.0
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=course. Executing a manipulat…
CVE-2026-105246High· 7.3PoCA vulnerability was found in SourceCodester Online Reviewer Management System 1.0
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/Subject/btn_functions.php?action=update. Performing a manipulation of the argum…
CVE-2026-105182High· 7.3PoCA security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0
A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=update. The manipulation of the a…
CVE-2026-105178Medium· 4.7A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. Performing a manip…
CVE-2026-105177Medium· 4.7A vulnerability was identified in SourceCodester Drug Recommendation System 1.0
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtyp…
CVE-2026-105176Medium· 4.7A vulnerability was determined in SourceCodester Drug Recommendation System 1.0
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be c…
CVE-2026-105179Low· 2.7PoCA weakness has been identified in SourceCodester Drug Recommendation System 1.0
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. Executing a manipulation of the argument Password can lea…
CVE-2026-105175High· 7.3PoCA vulnerability was found in SourceCodester Drug Recommendation System 1.0
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component Student Registration. The manipulation of the argument cmdschool re…
CVE-2026-104612Medium· 4.3A vulnerability was found in SourceCodester Student Result Management System 1.0
A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/new_announcement.php of the component Announcement Module. The manipulation of the argument t…
CVE-2026-104123High· 7.3PoCA vulnerability was detected in SourceCodester Online Reviewer Management System 1.0
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. The…
CVE-2026-102913High· 7.3PoCA security flaw has been discovered in SourceCodester Car Driving School Management System 1.0
A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save_enrollment. The manipulation results in sql injection. The attack can …
CVE-2026-102912Medium· 4.7PoCA vulnerability was identified in SourceCodester Online Leave Management System 1.0
A vulnerability was identified in SourceCodester Online Leave Management System 1.0. This issue affects some unknown processing of the file /admin/?page=reports. The manipulation of the argument date_start/date_end leads to sql injection…
CVE-2026-102910High· 7.3PoCA security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0
A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/examproper/exam-delete.php. The manipulation of the argum…
CVE-2026-102909High· 7.3PoCA vulnerability was identified in SourceCodester Online Reviewer Management System 1.0
A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/examproper/btn_functions.php. The manipulation of the argument access_code…
CVE-2026-102908High· 7.3PoCA vulnerability was determined in SourceCodester Online Reviewer Management System 1.0
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the …
CVE-2026-95957Medium· 4.3PoCA vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0
A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file student_signup.php of the component Self-Registration. Performing a manipulation of the arg…
CVE-2026-95926High· 7.3PoCA vulnerability was determined in SourceCodester Online Reviewer Management System 1.0
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The impacted element is an unknown function of the file /reviewer_0/admins/assessments/pretest/btn_functions.php?action=update. This manipulation of …
CVE-2026-95927High· 7.3PoCA vulnerability was identified in SourceCodester Online Reviewer Management System 1.0
A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. This affects an unknown function of the file /reviewer_0/admins/assessments/pretest/exam-delete.php. Such manipulation of the argument test_id leads …
CVE-2026-95925High· 7.3PoCA vulnerability was found in SourceCodester Online Reviewer Management System 1.0
A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=update. The manipulation of the a…
CVE-2026-95924High· 7.3PoCA vulnerability has been found in SourceCodester Online Reviewer Management System 1.0
A vulnerability has been found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/databank/btn_functions.php?action=add. The manipulation of the argument di…
CVE-2026-94035Medium· 4.3PoCA vulnerability was determined in SourceCodester Drug Recommendation System 1.0
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting…
CVE-2026-94034Low· 3.5PoCA vulnerability was found in SourceCodester Drug Recommendation System 1.0
A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /drug_recommender/Admin/change_password of the component Password Change. Performing a manipulation of the…
CVE-2026-94033Low· 3.5PoCA vulnerability has been found in SourceCodester Drug Recommendation System 1.0
A vulnerability has been found in SourceCodester Drug Recommendation System 1.0. This vulnerability affects unknown code of the file /drug_recommender/Admin/add_user of the component User Management. Such manipulation of the argument txt…
CVE-2026-94016Low· 2.4PoCA security flaw has been discovered in SourceCodester Drug Recommendation System 1.0
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drug_recommender/Admin/add_symptom. Performing a manipulation of the argument txtname results in cross si…
CVE-2026-94015High· 7.3PoCA vulnerability was identified in SourceCodester Drug Recommendation System 1.0
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drug_recommender/Admin/edit_user.php. Such manipulation of the argument ID leads to sql injection. The attack …
CVE-2026-93997High· 7.3PoCA weakness has been identified in SourceCodester Drug Recommendation System 1.0
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/edit_symptom.php. This manipulation of the argument ID causes sql injection. The att…