SourceCodester
Number 14 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Combines these spellings from source records: SourceCodester, Sourcecodester, sourcecodester
Total vulnerabilities
2,148
Critical
24
High
495
Known Exploited
0
Exploit available
1,710
Network, no login needed
32.2%
Of 2,148 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 444 | 0 | 202 | 187 | 55 | 0 |
| 2025 | 356 | 1 | 128 | 179 | 48 | 0 |
| 2024 | 647 | 23 | 107 | 385 | 132 | 0 |
| 2023 | 514 | 0 | 36 | 361 | 117 | 0 |
| 2022 | 187 | 0 | 22 | 107 | 58 | 0 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| Class and Exam Timetabling System | 60 | 45 |
| Best Salon Management System | 33 | 5 |
| Online Computer and Laptop Store | 30 | 2 |
| Pharmacy Sales and Inventory System | 30 | 14 |
| Online Eyewear Shop | 29 | 2 |
| Best House Rental Management System | 27 | 5 |
| Pet Grooming Management Software | 26 | 8 |
| Pizzafy Ecommerce System | 25 | 5 |
| Online Tours & Travels Management System | 24 | 1 |
| Inventory Management System | 22 | 3 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| SQL Injection | 1,231 | 420 |
| Cross-Site Scripting | 462 | 5 |
| Unrestricted File Upload | 134 | 25 |
| Cross-Site Request Forgery | 36 | 1 |
| Improper Authorization | 33 | 9 |
| Improper Access Control | 30 | 11 |
| Improper Neutralization -> CWE-74 Injection -> CWE-79 Cross Site Scripting | 27 | 0 |
| Improper Neutralization -> CWE-74 Injection -> CWE-89 SQL Injection | 18 | 2 |
| Authentication Issues | 15 | 11 |
| File Inclusion | 13 | 2 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-125078 | SourceCodester Smart Attendance System with QR Code Scanner login.php session fixiation | Medium | 0.2% | |
| CVE-2026-125077 | SourceCodester Smart Attendance System with QR Code Scanner cross-site request forgery | Medium | 0.2% | |
| CVE-2026-125076 | SourceCodester Smart Attendance System with QR Code Scanner JSON Endpoint attendance_handler.php missing authentication | High | 0.4% | |
| CVE-2026-125075 | SourceCodester Smart Attendance System with QR Code Scanner Admin Account Creation create_admin.php getMessage missing authentication | High | 0.4% | |
| CVE-2026-125074 | SourceCodester Smart Attendance System with QR Code Scanner Password Reset reset_password.php password recovery | High | 0.3% | |
| CVE-2026-124571 | SourceCodester Simple CRUD using PHP and FPDF register.php sql injection | Medium | 0.2% | |
| CVE-2026-124570 | SourceCodester Online Leave Management System Employee Avatar Upload Extension Master.php cross site scripting | Low | 0.2% | |
| CVE-2026-122190 | SourceCodester Online Food Ordering System Category Management add_category.php cross site scripting | Low | 0.2% | |
| CVE-2026-116605 | SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security | Medium | 0.3% | |
| CVE-2026-116604 | SourceCodester Online Food Ordering System delete_admin.php missing authentication | Medium | 0.6% |