# cve.now: Sourcecodester The newest entries naming Sourcecodester as an affected vendor (up to 200), of 2,062 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-125078](https://cve.now/CVE-2026-125078.md): SourceCodester Smart Attendance System with QR Code Scanner login.php session fixiation (CVSS 5.3) - [CVE-2026-125077](https://cve.now/CVE-2026-125077.md): SourceCodester Smart Attendance System with QR Code Scanner cross-site request forgery (CVSS 5.3) - [CVE-2026-125076](https://cve.now/CVE-2026-125076.md): SourceCodester Smart Attendance System with QR Code Scanner JSON Endpoint attendance\_handler.php missing authentication (CVSS 6.9) - [CVE-2026-125075](https://cve.now/CVE-2026-125075.md): SourceCodester Smart Attendance System with QR Code Scanner Admin Account Creation create\_admin.php getMessage missing authentication (CVSS 6.9) - [CVE-2026-125074](https://cve.now/CVE-2026-125074.md): SourceCodester Smart Attendance System with QR Code Scanner Password Reset reset\_password.php password recovery (CVSS 6.9) - [CVE-2026-124571](https://cve.now/CVE-2026-124571.md): SourceCodester Simple CRUD using PHP and FPDF register.php sql injection (CVSS 5.3) - [CVE-2026-124570](https://cve.now/CVE-2026-124570.md): SourceCodester Online Leave Management System Employee Avatar Upload Extension Master.php cross site scripting (CVSS 4.8) - [CVE-2026-122190](https://cve.now/CVE-2026-122190.md): SourceCodester Online Food Ordering System Category Management add\_category.php cross site scripting (CVSS 4.8) - [CVE-2026-116605](https://cve.now/CVE-2026-116605.md): SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security (CVSS 6.9) - [CVE-2026-116604](https://cve.now/CVE-2026-116604.md): SourceCodester Online Food Ordering System delete\_admin.php missing authentication (CVSS 6.9) - [CVE-2026-116603](https://cve.now/CVE-2026-116603.md): SourceCodester Online Food Ordering System add\_food.php unrestricted upload (CVSS 5.1) - [CVE-2026-116602](https://cve.now/CVE-2026-116602.md): SourceCodester Online Food Ordering System delete.php unlink path traversal (CVSS 6.9) - [CVE-2026-116062](https://cve.now/CVE-2026-116062.md): SourceCodester Performance Indicator System save\_profile.php sql injection (CVSS 6.9) - [CVE-2026-116061](https://cve.now/CVE-2026-116061.md): SourceCodester Performance Indicator System edit\_dealer.php sql injection (CVSS 6.9) - [CVE-2026-116060](https://cve.now/CVE-2026-116060.md): SourceCodester Performance Indicator System adddealer.php sql injection (CVSS 6.9) - [CVE-2026-116055](https://cve.now/CVE-2026-116055.md): SourceCodester Performance Indicator System deleteproduct.php sql injection (CVSS 5.3) - [CVE-2026-114267](https://cve.now/CVE-2026-114267.md): SourceCodester Food Order Management System Admin Endpoint authorization (CVSS 6.9) - [CVE-2026-112097](https://cve.now/CVE-2026-112097.md): SourceCodester Inventory System Sales Management transactions\_handler.php save\_sale cross site scripting (CVSS 5.1) - [CVE-2026-112096](https://cve.now/CVE-2026-112096.md): SourceCodester Inventory System Purchase Records transactions\_handler.php save\_purchase cross site scripting (CVSS 5.1) - [CVE-2026-112095](https://cve.now/CVE-2026-112095.md): SourceCodester Inventory System Product Management products\_handler.php save cross site scripting (CVSS 5.1) - [CVE-2026-109620](https://cve.now/CVE-2026-109620.md): SourceCodester Online Reviewer System index.php prepare sql injection (CVSS 6.9) - [CVE-2026-109607](https://cve.now/CVE-2026-109607.md): SourceCodester Online Exam System Login Endpoint loginExe.php sql injection (CVSS 6.9) - [CVE-2026-109606](https://cve.now/CVE-2026-109606.md): SourceCodester Art Gallery Management System Account Creation admin\_class.php save\_user sql injection (CVSS 6.9) - [CVE-2026-109605](https://cve.now/CVE-2026-109605.md): SourceCodester Simple Cafe Billing System User Management admin\_class.php save\_user improper authorization (CVSS 6.9) - [CVE-2026-108975](https://cve.now/CVE-2026-108975.md): SourceCodester Library Management System add\_admin.php move\_uploaded\_file unrestricted upload (CVSS 6.9) - [CVE-2026-108974](https://cve.now/CVE-2026-108974.md): SourceCodester E-Learning System Users.php save\_users unrestricted upload (CVSS 6.9) - [CVE-2026-108973](https://cve.now/CVE-2026-108973.md): SourceCodester Contact Tracing System Users.php move\_uploaded\_file unrestricted upload (CVSS 6.9) - [CVE-2026-108972](https://cve.now/CVE-2026-108972.md): SourceCodester Human Resource Management System Employee Endpoint employee.php session\_start improper authentication (CVSS 6.9) - [CVE-2026-108968](https://cve.now/CVE-2026-108968.md): SourceCodester Performance Indicator System sales\_history.php sql injection (CVSS 6.9) - [CVE-2026-108967](https://cve.now/CVE-2026-108967.md): SourceCodester Performance Indicator System edit\_credit.php sql injection (CVSS 6.9) - [CVE-2026-108966](https://cve.now/CVE-2026-108966.md): SourceCodester Performance Indicator System product.php sql injection (CVSS 6.9) - [CVE-2026-108965](https://cve.now/CVE-2026-108965.md): SourceCodester Performance Indicator System edit\_quantity.php sql injection (CVSS 6.9) - [CVE-2026-108964](https://cve.now/CVE-2026-108964.md): SourceCodester Performance Indicator System addproduct.php sql injection (CVSS 6.9) - [CVE-2026-108920](https://cve.now/CVE-2026-108920.md): SourceCodester Drug Recommendation System Admin Record Tables user\_record.php cross site scripting (CVSS 5.3) - [CVE-2026-108919](https://cve.now/CVE-2026-108919.md): SourceCodester Drug Recommendation System Student Registration add\_student.php cross site scripting (CVSS 5.3) - [CVE-2026-105957](https://cve.now/CVE-2026-105957.md): SourceCodester Performance Indicator System view\_product.php sql injection (CVSS 5.3) - [CVE-2026-105809](https://cve.now/CVE-2026-105809.md): SourceCodester Simple Student Information System Profile Field register.php cross site scripting (CVSS 5.3) - [CVE-2026-105808](https://cve.now/CVE-2026-105808.md): SourceCodester Simple Student Information System searchresults.php clean cross site scripting (CVSS 5.1) - [CVE-2026-105807](https://cve.now/CVE-2026-105807.md): SourceCodester Simple Student Information System searchquery.php sql injection (CVSS 6.9) - [CVE-2026-105706](https://cve.now/CVE-2026-105706.md): SourceCodester Drug Recommendation System cross-site request forgery (CVSS 5.3) - [CVE-2026-105705](https://cve.now/CVE-2026-105705.md): SourceCodester Drug Recommendation System add\_drug.php cross site scripting (CVSS 5.3) - [CVE-2026-105704](https://cve.now/CVE-2026-105704.md): SourceCodester Drug Recommendation System Auth Guard improper authentication (CVSS 6.9) - [CVE-2026-105247](https://cve.now/CVE-2026-105247.md): SourceCodester Online Reviewer Management System btn\_functions.php course sql injection (CVSS 6.9) - [CVE-2026-105246](https://cve.now/CVE-2026-105246.md): SourceCodester Online Reviewer Management System btn\_functions.php update sql injection (CVSS 6.9) - [CVE-2026-105182](https://cve.now/CVE-2026-105182.md): SourceCodester Online Reviewer Management System btn\_functions.php update sql injection (CVSS 6.9) - [CVE-2026-105179](https://cve.now/CVE-2026-105179.md): SourceCodester Drug Recommendation System Password add\_user.php missing encryption (CVSS 5.1) - [CVE-2026-105178](https://cve.now/CVE-2026-105178.md): SourceCodester Drug Recommendation System Symptom Creation add\_symptom.php mysqli\_real\_escape\_string sql injection (CVSS 5.1) - [CVE-2026-105177](https://cve.now/CVE-2026-105177.md): SourceCodester Drug Recommendation System Drug Creation add\_drug.php sql injection (CVSS 5.1) - [CVE-2026-105176](https://cve.now/CVE-2026-105176.md): SourceCodester Drug Recommendation System edit\_class.php sql injection (CVSS 5.1) - [CVE-2026-105175](https://cve.now/CVE-2026-105175.md): SourceCodester Drug Recommendation System Student Registration add\_student.php sql injection (CVSS 6.9) - [CVE-2026-104612](https://cve.now/CVE-2026-104612.md): SourceCodester Student Result Management System Announcement new\_announcement.php cross site scripting (CVSS 5.3) - [CVE-2026-104123](https://cve.now/CVE-2026-104123.md): SourceCodester Online Reviewer Management System btn\_functions.php activity sql injection (CVSS 6.9) - [CVE-2026-102913](https://cve.now/CVE-2026-102913.md): SourceCodester Car Driving School Management System Master.php save\_enrollment sql injection (CVSS 6.9) - [CVE-2026-102912](https://cve.now/CVE-2026-102912.md): SourceCodester Online Leave Management System page reports sql injection (CVSS 5.1) - [CVE-2026-102910](https://cve.now/CVE-2026-102910.md): SourceCodester Online Reviewer Management System exam-delete.php sql injection (CVSS 6.9) - [CVE-2026-102909](https://cve.now/CVE-2026-102909.md): SourceCodester Online Reviewer Management System btn\_functions.php sql injection (CVSS 6.9) - [CVE-2026-102908](https://cve.now/CVE-2026-102908.md): SourceCodester Online Reviewer Management System questions-view.php sql injection (CVSS 6.9) - [CVE-2026-95957](https://cve.now/CVE-2026-95957.md): SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student\_signup.php prepend cross site scripting (CVSS 5.3) - [CVE-2026-95927](https://cve.now/CVE-2026-95927.md): SourceCodester Online Reviewer Management System exam-delete.php sql injection (CVSS 6.9) - [CVE-2026-95926](https://cve.now/CVE-2026-95926.md): SourceCodester Online Reviewer Management System btn\_functions.php update sql injection (CVSS 6.9) - [CVE-2026-95925](https://cve.now/CVE-2026-95925.md): SourceCodester Online Reviewer Management System btn\_functions.php update sql injection (CVSS 6.9) - [CVE-2026-95924](https://cve.now/CVE-2026-95924.md): SourceCodester Online Reviewer Management System btn\_functions.php add sql injection (CVSS 6.9) - [CVE-2026-94035](https://cve.now/CVE-2026-94035.md): SourceCodester Drug Recommendation System index.php cross site scripting (CVSS 5.3) - [CVE-2026-94034](https://cve.now/CVE-2026-94034.md): SourceCodester Drug Recommendation System Password Change change\_password cross site scripting (CVSS 5.1) - [CVE-2026-94033](https://cve.now/CVE-2026-94033.md): SourceCodester Drug Recommendation System User Management add\_user cross site scripting (CVSS 5.1) - [CVE-2026-94016](https://cve.now/CVE-2026-94016.md): SourceCodester Drug Recommendation System add\_symptom cross site scripting (CVSS 4.8) - [CVE-2026-94015](https://cve.now/CVE-2026-94015.md): SourceCodester Drug Recommendation System edit\_user.php sql injection (CVSS 6.9) - [CVE-2026-93997](https://cve.now/CVE-2026-93997.md): SourceCodester Drug Recommendation System edit\_symptom.php sql injection (CVSS 6.9) - [CVE-2026-93974](https://cve.now/CVE-2026-93974.md): SourceCodester Online Reviewer Management System btn\_functions.php remove sql injection (CVSS 6.9) - [CVE-2026-93973](https://cve.now/CVE-2026-93973.md): SourceCodester Online Reviewer Management System btn\_functions.php remove sql injection (CVSS 6.9) - [CVE-2026-93972](https://cve.now/CVE-2026-93972.md): SourceCodester Online Reviewer Management System btn\_functions.php sql injection (CVSS 6.9) - [CVE-2026-93959](https://cve.now/CVE-2026-93959.md): SourceCodester Online Reviewer Management System btn\_functions.php sql injection (CVSS 6.9) - [CVE-2026-92927](https://cve.now/CVE-2026-92927.md): SourceCodester Drug Recommendation System drug\_recommendor.sql information disclosure (CVSS 6.9) - [CVE-2026-92406](https://cve.now/CVE-2026-92406.md): SourceCodester Inventory and Monitoring System btn\_functions.php add sql injection (CVSS 6.9) - [CVE-2026-92405](https://cve.now/CVE-2026-92405.md): SourceCodester Inventory and Monitoring System index.php sql injection (CVSS 6.9) - [CVE-2026-92385](https://cve.now/CVE-2026-92385.md): SourceCodester Online Food Ordering System Category Update update\_category.php cross site scripting (CVSS 4.8) - [CVE-2026-91005](https://cve.now/CVE-2026-91005.md): SourceCodester Online Faculty Clearance System Profile Picture Upload edit\_picture.php move\_uploaded\_file unrestricted upload (CVSS 5.3) - [CVE-2026-91004](https://cve.now/CVE-2026-91004.md): SourceCodester Online Faculty Clearance System delete\_faculty1.php sql injection (CVSS 6.9) - [CVE-2026-90877](https://cve.now/CVE-2026-90877.md): SourceCodester Online Faculty Clearance System update\_requirement\_status.php sql injection (CVSS 6.9) - [CVE-2026-90876](https://cve.now/CVE-2026-90876.md): SourceCodester Online Faculty Clearance System delete\_requirement.php sql injection (CVSS 6.9) - [CVE-2026-90857](https://cve.now/CVE-2026-90857.md): SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload (CVSS 5.3) - [CVE-2026-90856](https://cve.now/CVE-2026-90856.md): SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management (CVSS 6.9) - [CVE-2026-90855](https://cve.now/CVE-2026-90855.md): SourceCodester/katojkalemba Online Food Ordering System order.php sql injection (CVSS 6.9) - [CVE-2026-90854](https://cve.now/CVE-2026-90854.md): SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection (CVSS 6.9) - [CVE-2026-90849](https://cve.now/CVE-2026-90849.md): SourceCodester College Notes Gallery Management System login.php sql injection (CVSS 6.9) - [CVE-2026-90697](https://cve.now/CVE-2026-90697.md): SourceCodester Inventory Management System invoice.php authorization (CVSS 5.3) - [CVE-2026-90696](https://cve.now/CVE-2026-90696.md): SourceCodester Inventory Management System Product Management products\_handler.php cross site scripting (CVSS 5.1) - [CVE-2026-90695](https://cve.now/CVE-2026-90695.md): SourceCodester Inventory Management System Vendor Management vendors\_handler.php cross site scripting (CVSS 5.1) - [CVE-2026-90694](https://cve.now/CVE-2026-90694.md): SourceCodester Inventory Management System Customer Management customers\_handler.php cross site scripting (CVSS 5.1) - [CVE-2026-90615](https://cve.now/CVE-2026-90615.md): SourceCodester Class and Exam Timetabling System subject1.php cross site scripting (CVSS 5.3) - [CVE-2026-90526](https://cve.now/CVE-2026-90526.md): SourceCodester School Registration and Fee System save\_class.php sql injection (CVSS 6.9) - [CVE-2026-90516](https://cve.now/CVE-2026-90516.md): SourceCodester School Registration and Fee System pay\_report.php sql injection (CVSS 6.9) - [CVE-2026-90515](https://cve.now/CVE-2026-90515.md): SourceCodester School Registration and Fee System delete\_stud.php sql injection (CVSS 6.9) - [CVE-2026-90514](https://cve.now/CVE-2026-90514.md): SourceCodester School Registration and Fee System save\_stud.php sql injection (CVSS 6.9) - [CVE-2026-86298](https://cve.now/CVE-2026-86298.md): SourceCodester Class and Exam Timetabling System delete\_subject.php sql injection (CVSS 6.9) - [CVE-2026-86294](https://cve.now/CVE-2026-86294.md): SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting (CVSS 5.3) - [CVE-2026-86293](https://cve.now/CVE-2026-86293.md): SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication (CVSS 6.9) - [CVE-2026-86292](https://cve.now/CVE-2026-86292.md): SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication (CVSS 6.9) - [CVE-2026-86290](https://cve.now/CVE-2026-86290.md): SourceCodester Online Voting System ajax.php save\_category sql injection (CVSS 6.9) - [CVE-2026-86281](https://cve.now/CVE-2026-86281.md): SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery (CVSS 5.3) - [CVE-2026-86280](https://cve.now/CVE-2026-86280.md): SourceCodester Syllabus-Aligned Learning Management & Examination System cict\_portal.sql cleartext storage (CVSS 6.9) - [CVE-2026-86279](https://cve.now/CVE-2026-86279.md): SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth\_process.php session fixiation (CVSS 5.3) - [CVE-2026-86278](https://cve.now/CVE-2026-86278.md): SourceCodester Syllabus-Aligned Learning Management & Examination System manage\_subjects.php cross site scripting (CVSS 5.3) - [CVE-2026-86277](https://cve.now/CVE-2026-86277.md): SourceCodester Syllabus-Aligned Learning Management & Examination System delete\_exam.php authorization (CVSS 6.9) - [CVE-2026-86276](https://cve.now/CVE-2026-86276.md): SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials (CVSS 6.9) - [CVE-2026-86275](https://cve.now/CVE-2026-86275.md): SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management (CVSS 6.9) - [CVE-2026-86225](https://cve.now/CVE-2026-86225.md): SourceCodester Class and Exam Timetabling System modal\_add\_room.php mysqli\_query sql injection (CVSS 6.9) - [CVE-2026-86224](https://cve.now/CVE-2026-86224.md): SourceCodester Class and Exam Timetabling System modal\_add\_product.php mysqli\_query sql injection (CVSS 6.9) - [CVE-2026-86223](https://cve.now/CVE-2026-86223.md): SourceCodester Class and Exam Timetabling System modal\_add\_coursea.php mysqli\_query sql injection (CVSS 6.9) - [CVE-2026-86222](https://cve.now/CVE-2026-86222.md): SourceCodester Class and Exam Timetabling System modal\_add\_course2.php mysqli\_query sql injection (CVSS 6.9) - [CVE-2026-86221](https://cve.now/CVE-2026-86221.md): SourceCodester Class and Exam Timetabling System modal\_add\_course1.php mysqli\_query sql injection (CVSS 6.9) - [CVE-2026-86220](https://cve.now/CVE-2026-86220.md): SourceCodester Class and Exam Timetabling System modal\_add\_course.php mysqli\_query sql injection (CVSS 6.9) - [CVE-2026-86210](https://cve.now/CVE-2026-86210.md): SourceCodester Class and Exam Timetabling System delete\_user\_account.php sql injection (CVSS 6.9) - [CVE-2026-86209](https://cve.now/CVE-2026-86209.md): SourceCodester Class and Exam Timetabling System delete\_user.php sql injection (CVSS 6.9) - [CVE-2026-86208](https://cve.now/CVE-2026-86208.md): SourceCodester Class and Exam Timetabling System delete\_teacher.php sql injection (CVSS 6.9) - [CVE-2026-86162](https://cve.now/CVE-2026-86162.md): SourceCodester Online Voting System ajax.php login sql injection (CVSS 6.9) - [CVE-2026-86161](https://cve.now/CVE-2026-86161.md): SourceCodester Online Voting System ajax.php delete\_category sql injection (CVSS 6.9) - [CVE-2026-86160](https://cve.now/CVE-2026-86160.md): SourceCodester Online Voting System ajax.php delete\_voting sql injection (CVSS 6.9) - [CVE-2026-86159](https://cve.now/CVE-2026-86159.md): SourceCodester Online Voting System ajax.php save\_user sql injection (CVSS 6.9) - [CVE-2026-85512](https://cve.now/CVE-2026-85512.md): SourceCodester Class and Exam Timetabling System session.php authorization (CVSS 6.9) - [CVE-2026-82554](https://cve.now/CVE-2026-82554.md): SourceCodester Queue Management System add\_customer.php cross site scripting (CVSS 5.3) - [CVE-2026-81203](https://cve.now/CVE-2026-81203.md): SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection (CVSS 6.9) - [CVE-2026-78248](https://cve.now/CVE-2026-78248.md): SourceCodester Simple Online Food Ordering System ajax.php save\_settings sql injection (CVSS 6.9) - [CVE-2026-78247](https://cve.now/CVE-2026-78247.md): SourceCodester Simple Online Food Ordering System ajax.php confirm\_order sql injection (CVSS 6.9) - [CVE-2026-78199](https://cve.now/CVE-2026-78199.md): SourceCodester Simple Online Food Ordering System view\_prod.php sql injection (CVSS 6.9) - [CVE-2026-78198](https://cve.now/CVE-2026-78198.md): SourceCodester Simple Online Food Ordering System ajax.php add\_to\_cart sql injection (CVSS 6.9) - [CVE-2026-78197](https://cve.now/CVE-2026-78197.md): SourceCodester Simple Online Food Ordering System ajax.php save\_user sql injection (CVSS 6.9) - [CVE-2026-78115](https://cve.now/CVE-2026-78115.md): SourceCodester Class and Exam Timetabling System User Account Update edit\_user\_account.php improper authorization (CVSS 5.3) - [CVE-2026-78060](https://cve.now/CVE-2026-78060.md): SourceCodester Stock Management System getOrderReport.php cross site scripting (CVSS 5.3) - [CVE-2026-78059](https://cve.now/CVE-2026-78059.md): SourceCodester Stock Management System printOrder.php cross site scripting (CVSS 5.3) - [CVE-2026-78055](https://cve.now/CVE-2026-78055.md): SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting (CVSS 5.3) - [CVE-2026-78054](https://cve.now/CVE-2026-78054.md): SourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting (CVSS 5.3) - [CVE-2026-77392](https://cve.now/CVE-2026-77392.md): SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection (CVSS 5.3) - [CVE-2026-77391](https://cve.now/CVE-2026-77391.md): SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery (CVSS 5.3) - [CVE-2026-76999](https://cve.now/CVE-2026-76999.md): SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add\_grade improper authorization (CVSS 5.3) - [CVE-2026-76998](https://cve.now/CVE-2026-76998.md): SourceCodester Simple Online Food Ordering System ajax.php delete\_category sql injection (CVSS 6.9) - [CVE-2026-76997](https://cve.now/CVE-2026-76997.md): SourceCodester Simple Online Food Ordering System ajax.php save\_category sql injection (CVSS 5.3) - [CVE-2026-76996](https://cve.now/CVE-2026-76996.md): SourceCodester Simple Online Food Ordering System view\_order.php sql injection (CVSS 6.9) - [CVE-2026-76995](https://cve.now/CVE-2026-76995.md): SourceCodester Simple Online Food Ordering System ajax.php save\_menu unrestricted upload (CVSS 5.1) - [CVE-2026-76050](https://cve.now/CVE-2026-76050.md): SourceCodester Simple Online Food Ordering System ajax.php delete\_menu sql injection (CVSS 6.9) - [CVE-2026-76049](https://cve.now/CVE-2026-76049.md): SourceCodester Simple Online Food Ordering System ajax.php save\_menu sql injection (CVSS 6.9) - [CVE-2026-76048](https://cve.now/CVE-2026-76048.md): SourceCodester Simple Online Food Ordering System ajax.php login sql injection (CVSS 6.9) - [CVE-2026-75151](https://cve.now/CVE-2026-75151.md): SourceCodester Onlne Examination & Learning Management System cross-site request forgery (CVSS 5.3) - [CVE-2026-75080](https://cve.now/CVE-2026-75080.md): SourceCodester Class and Exam Timetabling System edit\_subject1.php sql injection (CVSS 6.9) - [CVE-2026-75079](https://cve.now/CVE-2026-75079.md): SourceCodester Class and Exam Timetabling System edit\_subject2.php sql injection (CVSS 6.9) - [CVE-2026-75078](https://cve.now/CVE-2026-75078.md): SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting (CVSS 5.3) - [CVE-2026-75077](https://cve.now/CVE-2026-75077.md): SourceCodester Class and Exam Timetabling System BSCE2.php cross site scripting (CVSS 5.3) - [CVE-2026-75014](https://cve.now/CVE-2026-75014.md): SourceCodester Pet Grooming Management Software get\_barcode\_data.php sql injection (CVSS 6.9) - [CVE-2026-19987](https://cve.now/CVE-2026-19987.md): SourceCodester Best Employee Management System Profile exposure of information through directory listing (CVSS 6.9) - [CVE-2026-19925](https://cve.now/CVE-2026-19925.md): SourceCodester Stock Management System Master.php delete\_supplier sql injection (CVSS 5.1) - [CVE-2026-19904](https://cve.now/CVE-2026-19904.md): SourceCodester Online Book Store System System Settings index.php site\_settings cross site scripting (CVSS 4.8) - [CVE-2026-19903](https://cve.now/CVE-2026-19903.md): SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access (CVSS 6.9) - [CVE-2026-19899](https://cve.now/CVE-2026-19899.md): SourceCodester Class and Exam Timetabling System edit\_teacher.php sql injection (CVSS 6.9) - [CVE-2026-19839](https://cve.now/CVE-2026-19839.md): SourceCodester Simple Doctors Appointment System save\_file.php save\_doctor unrestricted upload (CVSS 5.1) - [CVE-2026-19825](https://cve.now/CVE-2026-19825.md): SourceCodester Simple Client Management System Master.php save\_service sql injection (CVSS 6.9) - [CVE-2026-19787](https://cve.now/CVE-2026-19787.md): SourceCodester Air Cargo Management System Master.php save\_cargo\_type sql injection (CVSS 5.1) - [CVE-2026-19710](https://cve.now/CVE-2026-19710.md): SourceCodester Simple Student Information System view\_department.php sql injection (CVSS 6.9) - [CVE-2026-19384](https://cve.now/CVE-2026-19384.md): SourceCodester Simple Doctors Appointment System ajax.php set\_appointment sql injection (CVSS 6.9) - [CVE-2026-19231](https://cve.now/CVE-2026-19231.md): SourceCodester Simple Doctors Appointment System ajax.php delete\_appointment sql injection (CVSS 6.9) - [CVE-2026-19230](https://cve.now/CVE-2026-19230.md): SourceCodester Photo Share Website Comment Input Box ajax.php save\_upload cross site scripting (CVSS 5.1) - [CVE-2026-19229](https://cve.now/CVE-2026-19229.md): SourceCodester Online Clothing Store Dreamweaver Metadata Files \_notes file information disclosure (CVSS 6.9) - [CVE-2026-19211](https://cve.now/CVE-2026-19211.md): SourceCodester Photo Share Website ajax.php signup sql injection (CVSS 6.9) - [CVE-2026-19210](https://cve.now/CVE-2026-19210.md): SourceCodester Photo Share Website ajax.php save\_upload unrestricted upload (CVSS 5.3) - [CVE-2026-19209](https://cve.now/CVE-2026-19209.md): SourceCodester Photo Share Website index.php home cross site scripting (CVSS 5.1) - [CVE-2026-19196](https://cve.now/CVE-2026-19196.md): SourceCodester Photo Share Website ajax.php login sql injection (CVSS 6.9) - [CVE-2026-19066](https://cve.now/CVE-2026-19066.md): SourceCodester Online Examination & Learning Management System view\_students.php authorization (CVSS 5.3) - [CVE-2026-19065](https://cve.now/CVE-2026-19065.md): SourceCodester Online Examination & Learning Management System upload\_files.php unrestricted upload (CVSS 5.3) - [CVE-2026-19064](https://cve.now/CVE-2026-19064.md): SourceCodester Online Examination & Learning Management System view.php authorization (CVSS 5.3) - [CVE-2026-19021](https://cve.now/CVE-2026-19021.md): SourceCodester Computer Repair Shop Management System Master.php delete\_product sql injection (CVSS 6.9) - [CVE-2026-16486](https://cve.now/CVE-2026-16486.md): SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting (CVSS 5.3) - [CVE-2026-16485](https://cve.now/CVE-2026-16485.md): SourceCodester Class and Exam Timetabling System class.php cross site scripting (CVSS 5.3) - [CVE-2026-16484](https://cve.now/CVE-2026-16484.md): SourceCodester Class and Exam Timetabling System edit\_subjecta.php sql injection (CVSS 6.9) - [CVE-2026-16228](https://cve.now/CVE-2026-16228.md): SourceCodester Class and Exam Timetabling System edit\_schoolyr.php sql injection (CVSS 6.9) - [CVE-2026-16227](https://cve.now/CVE-2026-16227.md): SourceCodester Class and Exam Timetabling System edit\_subject.php sql injection (CVSS 6.9) - [CVE-2026-16226](https://cve.now/CVE-2026-16226.md): SourceCodester Pizzafy Ecommerce System admin\_class\_novo.php save\_settings unrestricted upload (CVSS 5.1) - [CVE-2026-16203](https://cve.now/CVE-2026-16203.md): SourceCodester Class and Exam Timetabling System forCYS.php cross site scripting (CVSS 5.1) - [CVE-2026-16202](https://cve.now/CVE-2026-16202.md): SourceCodester Class and Exam Timetabling System CYS.php cross site scripting (CVSS 5.1) - [CVE-2026-16156](https://cve.now/CVE-2026-16156.md): SourceCodester Class and Exam Timetabling System forexam.php cross site scripting (CVSS 5.1) - [CVE-2026-16155](https://cve.now/CVE-2026-16155.md): SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting (CVSS 5.1) - [CVE-2026-16154](https://cve.now/CVE-2026-16154.md): SourceCodester Class and Exam Timetabling System edit\_room1.php sql injection (CVSS 6.9) - [CVE-2026-16152](https://cve.now/CVE-2026-16152.md): SourceCodester Class and Exam Timetabling System edit\_rooma.php sql injection (CVSS 6.9) - [CVE-2026-15715](https://cve.now/CVE-2026-15715.md): SourceCodester Class and Exam Timetabling System exam.php cross site scripting (CVSS 5.3) - [CVE-2026-15703](https://cve.now/CVE-2026-15703.md): SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection (CVSS 6.9) - [CVE-2026-15597](https://cve.now/CVE-2026-15597.md): SourceCodester Class and Exam Timetabling System edit\_exam2.php sql injection (CVSS 6.9) - [CVE-2026-15596](https://cve.now/CVE-2026-15596.md): SourceCodester Class and Exam Timetabling System subject.php cross site scripting (CVSS 5.3) - [CVE-2026-15595](https://cve.now/CVE-2026-15595.md): SourceCodester Class and Exam Timetabling System forsubject.php cross site scripting (CVSS 5.3) - [CVE-2026-15540](https://cve.now/CVE-2026-15540.md): SourceCodester Online Book Store System Administrative index.php php file inclusion (CVSS 5.3) - [CVE-2026-15539](https://cve.now/CVE-2026-15539.md): SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload (CVSS 5.1) - [CVE-2026-15537](https://cve.now/CVE-2026-15537.md): SourceCodester Online Book Store System login.php sql injection (CVSS 6.9) - [CVE-2026-15532](https://cve.now/CVE-2026-15532.md): SourceCodester Online Book Store System User Management cross site scripting (CVSS 4.8) - [CVE-2026-15190](https://cve.now/CVE-2026-15190.md): SourceCodester Simple and Nice Shopping Cart Script login.php sql injection (CVSS 6.9) - [CVE-2026-14778](https://cve.now/CVE-2026-14778.md): SourceCodester Onlne Examination & Learning Management System Enrollment Management ajax\_enroll.php improper authorization (CVSS 6.9) - [CVE-2026-14777](https://cve.now/CVE-2026-14777.md): SourceCodester Onlne Examination & Learning Management System announcements.php unrestricted upload (CVSS 5.3) - [CVE-2026-14776](https://cve.now/CVE-2026-14776.md): SourceCodester Onlne Examination & Learning Management System Filename Extension upload\_files.php pathinfo unrestricted upload (CVSS 5.3) - [CVE-2026-14775](https://cve.now/CVE-2026-14775.md): SourceCodester Onlne Examination & Learning Management System process\_lesson.php unrestricted upload (CVSS 5.3) - [CVE-2026-14772](https://cve.now/CVE-2026-14772.md): SourceCodester Class and Exam Timetabling System edit\_course1.php sql injection (CVSS 6.9) - [CVE-2026-14771](https://cve.now/CVE-2026-14771.md): SourceCodester Class and Exam Timetabling System edit\_exam1.php sql injection (CVSS 6.9) - [CVE-2026-14770](https://cve.now/CVE-2026-14770.md): SourceCodester Class and Exam Timetabling System edit\_room.php sql injection (CVSS 6.9) - [CVE-2026-14734](https://cve.now/CVE-2026-14734.md): SourceCodester Class and Exam Timetabling System edit\_product.php sql injection (CVSS 6.9) - [CVE-2026-14733](https://cve.now/CVE-2026-14733.md): SourceCodester Class and Exam Timetabling System edit\_coursea.php sql injection (CVSS 6.9) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/sourcecodester Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.