Browse CVEs

MEDIUM 6.5 CVE-2026-30523 A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation. The application allow… Loan Management System No fix yet Fix from $1,6002026-04-01 MEDIUM 6.5 CVE-2026-30522 A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows ad… Loan Management System No fix yet Fix from $1,6002026-04-01 MEDIUM 6.5 CVE-2026-30521 A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation. The application allows ad… Loan Management System No fix yet Fix from $1,6002026-03-31 MEDIUM 5.4 CVE-2026-30520 A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file (specific… Loan Management System No fix yet Fix from $1,6002026-03-31 HIGH 8.3 CVE-2026-30534 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter. Online Food Ordering System No fix yet Fix from $1,9502026-03-27 CRITICAL 9.8 CVE-2026-30530 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer actio… Online Food Ordering System Mitigation only Fix from $2,3002026-03-27 CRITICAL 9.8 CVE-2026-30532 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter. Online Food Ordering System Mitigation only Fix from $2,3002026-03-27 CRITICAL 9.8 CVE-2026-30533 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter. Online Food Ordering System Mitigation only Fix from $2,3002026-03-27 HIGH 8.8 CVE-2026-30529 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action). … Online Food Ordering System No fix yet Fix from $1,9502026-03-27 HIGH 8.8 CVE-2026-30531 A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category actio… Online Food Ordering System No fix yet Fix from $1,9502026-03-27 MEDIUM 5.4 CVE-2026-30527 A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within … Online Food Ordering System No fix yet Fix from $1,6002026-03-27 MEDIUM 5.4 CVE-2026-3819 A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage… Resort Reservation System No fix yet Fix from $1,6002026-03-09 HIGH 8.8 CVE-2026-3806 A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0. This issue affects some unknown processing of the file /room_r… Resort Reservation System No fix yet Fix from $1,9502026-03-09 HIGH 8.8 CVE-2026-3800 A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. Affected is the function doInsert of the file /controller.php?… Resort Reservation System No fix yet Fix from $1,9502026-03-09 HIGH 8.8 CVE-2026-3771 A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0. This vulnerability affects unknown code of the file /accomodat… Resort Reservation System No fix yet Fix from $1,9502026-03-08 HIGH 8.8 CVE-2026-3770 A flaw has been found in SourceCodester Computer Laboratory Management System 1.0. This affects an unknown part. This manipulation causes cross-site … Computer Laboratory Management System No fix yet Fix from $1,9502026-03-08 HIGH 7.2 CVE-2026-3751 A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-rep… Employee Task Management System No fix yet Fix from $1,9502026-03-08 HIGH 7.2 CVE-2026-3752 A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-tas… Employee Task Management System No fix yet Fix from $1,9502026-03-08 CRITICAL 9.8 CVE-2026-3746 A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of… Simple Responsive Tourism Website Mitigation only Fix from $2,3002026-03-08 MEDIUM 6.1 CVE-2026-3702 A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.ph… Loan Management System No fix yet Fix from $1,6002026-03-08 HIGH 7.2 CVE-2026-26892 Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php. Simple Logistic Hub Parcel\'s Management System No fix yet Fix from $1,9502026-03-03 CRITICAL 9.8 CVE-2026-26704 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php. Pharmacy Point Of Sale System Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-26705 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php. Pharmacy Point Of Sale System Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-26706 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php. Pharmacy Point Of Sale System Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-26707 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php. Pharmacy Point Of Sale System Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-26708 sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php. Pharmacy Point Of Sale System Mitigation only Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-2848 A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file… Simple Responsive Tourism Website Mitigation only Fix from $2,3002026-02-20 CRITICAL 9.4 CVE-2025-70141 SourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enforce authe… Customer Support System No fix yet Fix from $2,3002026-02-18 MEDIUM 6.1 CVE-2026-2160 A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of… Simple Responsive Tourism Website No fix yet Fix from $1,6002026-02-08 MEDIUM 6.1 CVE-2026-2159 A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.ph… Simple Responsive Tourism Website No fix yet Fix from $1,6002026-02-08