#SourceCodester
All CosmicBytez Labs articles tagged #SourceCodester, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-105182: Unauthenticated SQL Injection in SourceCodester Online Reviewer Management System via Title Parameter
SourceCodester Online Reviewer Management System 1.0 lets remote, unauthenticated attackers inject SQL via the Title parameter in btn_functions.php.
- Security
CVE-2026-102909: SQL Injection in SourceCodester Online Reviewer Management System via access_code
CVE-2026-102909: SourceCodester Online Reviewer Management System 1.0 allows remote SQL injection via the access_code parameter in btn_functions.php.
- Security
CVE-2026-102908: Unauthenticated SQL Injection in SourceCodester Online Reviewer Management System
SourceCodester Online Reviewer Management System v1.0's questions-view.php lets remote, unauthenticated attackers inject SQL via the ID parameter.
- Security
CVE-2026-93973: Unauthenticated SQL Injection in SourceCodester Online Reviewer Management System (Subject Module)
Online Reviewer Management System v1.0's subject btn_functions.php lets remote, unauthenticated attackers inject SQL via the ID parameter.
- Security
CVE-2026-93974: Unauthenticated SQL Injection in SourceCodester Online Reviewer Management System (Databank Module)
Online Reviewer Management System v1.0's databank btn_functions.php lets remote, unauthenticated attackers inject SQL via the ID parameter.
- Security
CVE-2026-93997: Unauthenticated SQL Injection in SourceCodester Drug Recommendation System
Drug Recommendation System v1.0's edit_symptom.php lets remote, unauthenticated attackers inject SQL via the ID parameter.
- Security
CVE-2026-93959: Unauthenticated SQL Injection in SourceCodester Online Reviewer Management System
Online Reviewer Management System v1.0's btn_functions.php lets remote, unauthenticated attackers inject SQL via the Course parameter. PoC public.
- Security
SQL Injection in SourceCodester School Registration and Fee System 1.0
CVE-2026-90514 lets unauthenticated remote attackers inject SQL via the Status parameter in save_stud.php, with a public PoC exploit already live.
- Security
Unauthenticated SQL Injection Hits SourceCodester Online Voting System
CVE-2026-86290: an unauthenticated SQL injection in SourceCodester's Online Voting System via ajax.php's Category parameter, PoC public.
- Security
SQL Injection in SourceCodester Class & Exam Timetabling System
CVE-2026-86208: an unauthenticated SQL injection in delete_teacher.php lets remote attackers manipulate the ID parameter. Public exploit code exists.
- Security
Second SQL Injection Hits SourceCodester Timetabling System
CVE-2026-86209: SourceCodester's Class and Exam Timetabling System 1.0 has a second unauthenticated SQLi, this time in delete_user.php.
- Security
SQL Injection Hits SourceCodester Timetabling System Again
CVE-2026-86220: an unauthenticated SQLi in SourceCodester's Class and Exam Timetabling System lets attackers inject via modal_add_course.php.
- Security
Third SourceCodester Timetabling SQLi Hits the Admin Product Form
CVE-2026-86224: a pre-auth SQL injection in SourceCodester's Timetabling System admin panel via the fname parameter in modal_add_product.php.
- Security
CVE-2025-69941: Critical SQL Injection in Tailor Management System — Measurement Endpoint
CVSS 9.8 SQL injection in SourceCodester Tailor Management System 1.0 allows unauthenticated attackers to read, modify, or delete all database records...
- Security
CVE-2025-69947: Critical SQL Injection in Tailor Management System — Customer Edit Endpoint
CVSS 9.8 SQL injection in SourceCodester Tailor Management System 1.0 exposes full customer records through an unsanitized id parameter in...
- Security
CVE-2025-67403: Critical SQL Injection in CASAP Enrollment System update_class.php
A critical-severity SQL injection vulnerability (CVSS 9.8) in Sourcecodester CASAP Automated Enrollment System 1.0 allows unauthenticated remote attackers...
- Security
CVE-2025-67404: Critical SQL Injection in CASAP Enrollment System save_stud.php
A critical-severity SQL injection vulnerability (CVSS 9.8) in Sourcecodester CASAP Automated Enrollment System 1.0 allows unauthenticated attackers to...
- Security
CVE-2026-16227: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate...
- Security
CVE-2026-16228: SQL Injection in SourceCodester Class and Exam Timetabling System via edit_schoolyr.php
A second SQL injection flaw in SourceCodester Class and Exam Timetabling System 1.0 exposes the /edit_schoolyr.php endpoint to remote unauthenticated...
- Security
CVE-2026-16152: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester Class and Exam Timetabling System 1.0. The flaw in /edit_rooma.php...
- Security
CVE-2026-16154: SQL Injection in SourceCodester Timetabling Room Management
A second SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 has been disclosed, this time affecting the /edit_room1.php...
- Security
CVE-2026-14732: SQL Injection in SourceCodester Timetabling System via /edit_exam.php
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows remote attackers to manipulate the database via...
- Security
CVE-2026-14733: SQL Injection in SourceCodester Timetabling System via /edit_coursea.php
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows remote attackers to manipulate the database via...
- Security
CVE-2026-14734: SQL Injection in SourceCodester Timetabling System via /edit_product.php
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows remote attackers to manipulate the database via...
- Security
CVE-2026-14770: SQL Injection in SourceCodester Class and Exam Timetabling System
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows remote attackers to manipulate backend database...
- Security
CVE-2026-14771: SQL Injection in SourceCodester Class and Exam Timetabling System
An unauthenticated remote SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows attackers to manipulate the id...
- Security
CVE-2026-14641: Remote SQL Injection in SourceCodester Class and Exam Timetabling System
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to dump the...
- Security
CVE-2026-14642: Remote SQL Injection in SourceCodester Timetabling System edit_class2.php
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to fully...
- Security
CVE-2026-14652: SQL Injection in SourceCodester Shopping Cart Admin Login
A high-severity SQL injection vulnerability in SourceCodester Simple and Nice Shopping Cart Script 1.0 allows remote attackers to manipulate the admin...
- Security
CVE-2026-14653: SQL Injection in Shopping Cart Men's Product Delete Endpoint
A high-severity SQL injection flaw in SourceCodester Simple and Nice Shopping Cart Script 1.0 exposes the men's product delete query to remote...
- Security
CVE-2026-14654: SQL Injection in Shopping Cart Girls Product Delete Endpoint
A high-severity SQL injection vulnerability in SourceCodester Simple and Nice Shopping Cart Script 1.0 allows remote attackers to exploit the girls...
- Security
SQL Injection in Multi-Vendor Online Grocery Management System (CVE-2026-14695)
A high-severity SQL injection vulnerability in SourceCodester's Multi-Vendor Online Grocery Management System 1.0 allows remote attackers to manipulate...
- Security
SQL Injection in Pizzafy E-Commerce System Exposes Order Data (CVE-2026-14713)
A remotely exploitable SQL injection flaw in SourceCodester Pizzafy E-Commerce System 1.0 allows attackers to manipulate the confirm_order endpoint via an...
- Security
Privilege Escalation via Role Manipulation in Online Exam LMS (CVE-2026-14719)
A high-severity improper privilege management flaw in SourceCodester's Online Examination and Learning Management System 1.0 allows remote attackers to...
- Security
CVE-2026-13521: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection vulnerability affects SourceCodester Class and Exam Timetabling System 1.0 via the course_year_section parameter in...
- Security
CVE-2026-13526: SQL Injection in SourceCodester Class and Exam Timetabling System
A remotely exploitable SQL injection flaw in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate...
- Security
CVE-2026-13485: SQL Injection in SourceCodester Class and Exam Timetabling System
A high-severity SQL injection vulnerability in SourceCodester's Class and Exam Timetabling System 1.0 allows unauthenticated remote attackers to...
- Security
CVE-2026-13486: SQL Injection in SourceCodester Class and Exam Timetabling System (preview6.php)
A second high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 targets /preview6.php via the...
- Security
CVE-2026-13487: SQL Injection in SourceCodester Timetabling System (/archive.php)
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate the...
- Security
CVE-2026-13488: SQL Injection in SourceCodester Timetabling System (/preview7.php)
A high-severity SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 allows unauthenticated attackers to manipulate the...
- Security
CVE-2026-10236: Improper Authorization in SourceCodester Water Billing Management System
A remotely exploitable improper authorization vulnerability in the SourceCodester Water Billing Management System 1.0 allows unauthenticated attackers to…
- Security
CVE-2026-10263: SQL Injection in SourceCodester Computer Repair Shop Management System
A CVSS 7.3 SQL injection vulnerability in SourceCodester's Computer Repair Shop Management System v1.0 allows remote attackers to extract sensitive data via…
- Security
CVE-2026-10184: SourceCodester Hospital Records SQL Injection via Delete
A SQL injection vulnerability in SourceCodester Hospitals Patient Records Management System 1.0 allows remote attackers to extract database contents by…
- Security
CVE-2026-10185: SourceCodester Hospital Records SQL Injection via Save
A SQL injection vulnerability in SourceCodester Hospitals Patient Records Management System 1.0 enables remote attackers to extract database contents by…
- Security
CVE-2026-7224: SQL Injection in Pizzafy Ecommerce System 1.0
A high-severity SQL injection vulnerability has been discovered in SourceCodester Pizzafy Ecommerce System 1.0, allowing remote attackers to manipulate...
- Security
CVE-2026-5575: SQL Injection in SourceCodester Record
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester/jkev Record Management System 1.0, affecting the Login page's...
- Security
CVE-2026-3734: Improper Authorization in SourceCodester
A remotely exploitable improper authorization vulnerability has been disclosed in SourceCodester Client Database Management System 1.0, allowing...
- Security
CVE-2026-3746: SQL Injection in SourceCodester Simple
A remotely exploitable SQL injection vulnerability has been disclosed in SourceCodester Simple Responsive Tourism Website 1.0, allowing attackers to...