Sourcecodester Vulnerabilities


The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.


The moderation team is working with the threat intelligence team to categorize software that is affected by security vulnerabilities. This helps to illustrate the assignment of these categories to determine the most affected software types.


SourceCodester Library Management System34
SourceCodester Prison Management System32
SourceCodester Online Computer and Laptop Store28
SourceCodester Online Tours & Travels Management S ...24
SourceCodester Lost and Found Information System22

Grouping vulnerabilities by products helps to get an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.


Official Fix2
Temporary Fix0
Not Defined1459

Vendors and researchers are eager to find countermeasures to mitigate security vulnerabilities. These can be distinguished between multiple forms and levels of remediation which influence risks differently.


Not Defined405

Researcher and attacker which are looking for security vulnerabilities try to exploit them for academic purposes or personal gain. The level and quality of exploitability can be distinguished to determine simplicity and strength of attacks.

Access Vector

Not Defined0

The approach a vulnerability it becomes important to use the expected access vector. This is typically via the network, local, or physically even.


Not Defined0

To exploit a vulnerability a certail level of authentication might be required. Vulnerabilities without such a requirement are much more popular.

User Interaction

Not Defined0

Some attack scenarios require some user interaction by a victim. This is typical for phishing, social engineering and cross site scripting attacks.

C3BM Index

Our unique C3BM Index (CVSSv3 Base Meta Index) cumulates the CVSSv3 Meta Base Scores of all entries over time. Comparing this index to the amount of disclosed vulnerabilities helps to pinpoint the most important events.

CVSSv3 Base


The Common Vulnerability Scoring System (CVSS) is an industry standard to define the characteristics and impacts of security vulnerabilities. The base score represents the intrinsic aspects that are constant over time and across user environments. Our unique meta score merges all available scores from different sources to aggregate to the most reliable result.

CVSSv3 Temp


The Common Vulnerability Scoring System (CVSS) uses temp scores to reflect the characteristics of a vulnerability that may change over time but not across user environments. This includes reporting confidence, exploitability and remediation levels. We do also provide our unique meta score for temp scores, even though other sources rarely publish them.



The moderation team is always defining the base vector and base score for an entry. These and all other available scores are used to generate the meta score.



The National Vulnerability Database (NVD) is also defining CVSS vectors and scores. These are usually not complete and might differ from VulDB scores.



A CVE Numbering Authority (CNA) is responsible for assigning new CVE entries. They might also include a CVSS score. These are usually not complete and might differ from VulDB scores.



Some vendors are willing to publish their own CVSS vectors and scores for vulnerabilities in their products. The coverage varies from vendor to vendor.



There are sometimes also security researcher which provide their own CVSS vectors and scores for vulnerabilities they have found and published.

Exploit 0-day


The moderation team is working with the threat intelligence team to determine prices for exploits. Our unique algorithm is used to identify the 0-day prices for an exploit, before it got distributed or became public. Calculated prices are aligned to prices disclosed by vulnerability broker and compared to prices we see on exploit markets.

Exploit Today


The 0-day prices do not consider time-relevant factors. The today price does reflect price impacts like disclosure of vulnerability details, alternative exploits, availability of countermeasures. These dynamic aspects might decrease the exploit prices over time. Under certain circumstances this happens very fast.

Exploit Market Volume

Our unique calculation of exploit prices makes it possible to forecast the expected exploit market volume. The calculated prices for all possible 0-day expoits are cumulated for this task. Comparing the volume to the amount of disclosed vulnerabilities helps to pinpoint the most important events.

🔴 CTI Activities

Our unique Cyber Threat Intelligence aims to determine the ongoing research of actors to anticipiate their acitivities. Observing exploit markets on the Darknet, discussions of vulnerabilities on mailinglists, and exchanges on social media makes it possible to identify planned attacks. Monitored actors and activities are classified whether they are offensive or defensive. They are also weighted as some actors are well-known for certain products and technologies. And some of their disclosures might contain more or less details about technical aspects and personal context. The world map highlights active actors in real-time.

Affected Products (378): AC Repair and Services System (14), Air Cargo Management System (4), Airline Ticket Reservation System (1), Alphaware Simple E-Commerce System (6), Alumni Management System (6), Apartment Visitor Management System (4), Aplaya Beach Resort Online Reservation System (11), Art Gallery Management System (2), Attendance Management System (2), Attendance and Payroll System (17), Auto Dealer Management System (4), Automated Beer Parlour Billing System (1), Automatic Question Paper Generator System (7), Baby Care System (18), Bank Management System (2), Banking System (1), Barangay Population Monitoring System (2), Basic Shopping Cart (1), Best Courier Management System (14), Best Fee Management System (2), Best House Rental Management System (6), Best Online News Portal (3), Best POS Management System (12), Billing Management System (2), Billing System Project (3), Block Inserter for Dynamic Content (1), Blog Site (1), Blood Bank Management System (2), Book Borrower System (1), Book Store Management System (5), Booking System (1), Budget Management System (1), Budget and Expense Tracker System (3), COVID 19 Testing Management System (2), CRUD without Page Reload (2), Cab Management System (1), Canteen Management System (16), Car Rental Management System (2), Card Holder Management System (1), Cashier Queuing System (3), Centralized Covid Vaccination Records System (1), Church Management System (2), Class Scheduling System (3), Class and Exam Timetabling System (1), Clinic Queuing System (2), Clinics Patient Management System (5), Codester Human Resource Management System (2), College Website Management System (1), Comment System (1), Company Website CMS (10), Complaint Management System (6), Complete E-Commerce Site (2), Complete File Management System (2), Computer Inventory System (3), Computer Laboratory Management System (10), Computer Parts Sales and Inventory System (5), Computer and Mobile Repair Shop Management System (1), Contact Manager App (5), Content Management System (1), Covid-19 Contact Tracing System (1), Covid-19 Directory on Vaccination (2), Customer Relationship Management (2), Customer Support System (2), Daily Habit Tracker (1), Daily Habit Tracker App (1), Daily Tracker System (2), Dental Clinic Appointment Reservation System (3), Design and Implementation of Covid-19 Directory on Vaccination System (3), Doctor's Appointment System (1), Doctor Appointment System (2), Doctors Appointment System (9), Dynamic Transaction Queuing System (1), E-Commerce System (5), E-Commerce Website (4), E-Negosyo System (2), Earnings and Expense Tracker App (5), Electric Billing Management System (1), Electricity Consumption Monitoring Tool (1), Electronic Medical Records System (3), Employee Daily Task Management System (1), Employee Management System (16), Employee Payslip Generator (1), Employee Payslip Generator with Sending Mail (1), Employee Task Management System (16), Employee and Visitor Gate Pass Logging System (7), Employees Payroll Management System (1), Engineers Online Portal (18), Engineers Online Portal in PHP (7), Enrollment System Project (1), Equipment Inventory System (1), Event Registration App (1), Event Registration System (9), Event Student Attendance System (1), Expense Management System (1), Expense Tracker App (2), FAQ Management System (4), Facebook News Feed Like (4), Faculty Evaluation System (13), Fantastic-Blog-CMS (1), Fantastic Blog CMS (1), File Manager App (2), File Tracker Manager System (4), Flashcard Quiz App (1), Food Ordering Management System (2), Food Ordering System (2), Free Hospital Management System for Small Practices (9), Free School Management Software (1), Free and Open Source Inventory Management System (8), Friendly Island Pizza Website and Ordering System (5), Gadget Works Online Ordering System (5), Game Result Matrix System (2), Garage Management System (17), Gas Agency Management System (5), Grade Point Average GPA Calculator (4), Guest Management System (5), Gym Management System (13), Health Center Patient Record Management System (4), Home Clean Service System (1), Hospital Management System (1), Hospital Patient Record Management System (1), Hospitals Patient Records Management System (1), Hotel (1), Hotel Management System (3), Hotel and Lodge Management System (1), House Rental Management System (4), House Rental and Property Listing (2), House Rental and Property Listing System (1), Human Resource Information System (3), Human Resource Management System (18), ICT Laboratory Management System (1), Image Accordion Gallery App (1), Ingredient Stock Management System (2), Insurance Management System (2), Interactive Map with Marker (2), Internship Portal Management System (8), Interview Management System (2), Inventory Management System (15), Invoice System (1), Jewelry Store System (1), Judging Management System (11), Kortex Lite Advocate Office Management System (5), Laboratory Management System (8), Laundry Management System (5), Lead Management System (8), Learning Management System (1), Library Management System (34), Library System (2), Life Insurance Management System (2), Loan Management System (9), Local Service Search Engine Management System (1), Lodge Management System (1), Lodging Reservation Management System (1), Login System with Email Verification (1), Logistic Hub Parcel's Management System (1), Lost and Found Information System (22), Management System (4), Math Game with Leaderboard (1), Medical Certificate Generator App (5), Medical Hub Directory Site (1), Medicine Tracker System (5), Medicine Tracking System (2), Messaging Web Application (1), Microfinance Management System (3), Mobile Shop System in PHP MySQL (1), Money Transfer Management System (1), Monitoring of Students Cyber Accounts System (2), Moosikay E-Commerce System (1), Multi Language Hotel Management Software (3), Multi Restaurant Table Reservation System (6), Music Gallery Site (7), My Food Recipe (1), News247 CMS (1), News247 News Magazine (1), One Church Management System (3), Online Admission System (4), Online Art Gallery Management System (1), Online Bike Rental (1), Online Birth Certificate Management System (1), Online Boat Reservation System (1), Online Book Store (1), Online Bus Booking System (1), Online Catering Reservation System (2), Online Chatting System (1), Online Class and Exam Scheduling System (2), Online Clothing Store (3), Online Computer and Laptop Store (30), Online Course Registration (2), Online Courseware (13), Online Covid-19 Directory on Vaccination System (1), Online Covid Vaccination Scheduler System (4), Online DJ Management System (4), Online Diagnostic Lab Management System (5), Online Discussion Forum Site (15), Online Employee Leave Management System (1), Online Enrollment Management System in PHP (2), Online Event Booking and Reservation System (3), Online Exam Form Submission (1), Online Exam System (8), Online Examination System (2), Online Eyewear Shop (7), Online Flight Booking Management System (3), Online Food Menu (1), Online Food Ordering System (14), Online Grading System (3), Online Graduate Tracer System (11), Online Health Care System (1), Online Hospital Management System (2), Online Internship Management System (1), Online Jewelry Store (3), Online Job Portal (3), Online Learning System (2), Online Learning System V2 (1), Online Leave Management System (1), Online Library System (7), Online Market Place Site (2), Online Medicine Ordering System (3), Online Mobile Management Store (9), Online Motorcycle Rental System (1), Online Payment Hub (1), Online Payroll System (9), Online Pet Shop We App (1), Online Pizza Ordering System (19), Online Project Time Management System (3), Online Quiz System (1), Online Railway Reservation Sysytem (1), Online Resort Management System (1), Online Reviewer Management System (1), Online Reviewer System (3), Online School Fees System (3), Online Shopping Alphaware (2), Online Student Admission System (1), Online Student Management System (5), Online Thesis Archiving System (1), Online Tours & Travels Management System (24), OpenOlat (1), Open Source Clinic Management System (1), Ordering System (1), PHP CRUD Tutorial (1), PHP Task Management System (11), POS Point Sale System (1), Packers and Movers Management System (2), Password Storage Application (1), Patient Appointment Scheduler System (1), Performance Indicator System (1), Personnel Property Equipment System (2), Petrol Pump Management Software (7), Pharmacy Management System (1), Pharmacy Medical Store Point of Sale System (1), Phone Shop Sales Management System (1), Phone Shop Sales Managements System (4), Pisay Online E-Learning System (2), Pizza Ordering System (1), Police Crime Record Management System (2), Printable Staff ID Card Creator System (1), Prison Management System (32), Product Inventory with Export to Excel (1), Product Management System (1), Product Review Rating System (1), Product Show Room (3), Product Show Room Site (2), Purchase Order Management System (7), QR Code Bookmark System (1), QR Code Login System (1), Raffle Draw System (5), Rescue Dispatch Management System (2), Resort Management System (1), Resort Reservation System (6), Responsive Online Blog (1), Responsive Ordering System (1), Royale Event Management System (2), SCBS Online Sports Venue Reservation System (2), SUP Online Shopping (1), Sales Management System (1), Sales Tracker Management System (8), Sales and Inventory System (1), Sanitization Management System (12), School Activity Updates with SMS Notification (1), School Dormitory Management System (6), School File Management System (2), School Intramurals Student Attendance Management System (3), School Registration and Fee System (2), School Task Manager (4), School Task Manager App (1), School Visitor Log e-Book (1), SchoolWebTech (1), Seat Reservation System (2), Service Provider Management System (11), Shopping Website (5), Simple Bakery Shop Management System (1), Simple Book Catalog App (2), Simple Cashiering System (2), Simple Chat System (1), Simple Chatbot Application (2), Simple Client Management System (6), Simple Cold Storage Management System (8), Simple College Website (2), Simple Customer Relationship Management System (14), Simple E-Learning System (9), Simple File Manager (1), Simple Food Ordering System (2), Simple Food Website (2), Simple Grocery Store Sales and Inventory System (1), Simple Guestbook Management System (1), Simple Image Stack Website (2), Simple Inventory System (5), Simple Invoice Generator System (1), Simple Library Management System (2), Simple Membership System (6), Simple Mobile Comparison Website (3), Simple Music Clour Community System (1), Simple Music Player (1), Simple Online Bidding System (10), Simple Online Book Store (1), Simple Online Book Store System (5), Simple Online Mens Salon Management System (3), Simple Online Public Access Catalog (1), Simple Parking Management System (2), Simple Payroll System (1), Simple Real Estate Portal System (1), Simple Responsive Tourism Website (1), Simple Sales Management System (1), Simple Social Networking Site (4), Simple Student Attendance System (11), Simple Student Information System (3), Simple Subscription Website (8), Simple Task Allocation System (3), Simple Task Managing System (7), Simple Water Refilling Station Management System (2), Simple and Beautiful Shopping Cart System (3), Simple and Nice Shopping Cart Script (5), Simple e-Learning System (1), South Gate Inn Online Reservation System (2), Sticky Notes App (3), Stock Management System (7), Stock Management System in PHP OOP (1), Storage Unit Rental Management System (4), Student Attendance Management System (1), Student Attendance System (1), Student Information System (1), Student Management System (3), Student Quarterly Grading System (1), Student Result Management System (1), Student Study Center Desk Management System (11), Students Online Internship Timesheet Syste (1), Students Online Internship Timesheet System (1), Survey Application System (1), Tailor Management (1), Tailor Management System (4), Tailor Mangement System (2), Take-Note App (2), Task Management System (1), Task Reminder System (9), Testimonial Page Manager (2), Theme Park Ticketing System (4), Todo List in Kanban Board (2), Toll Tax Management System (2), Tourism Management System (2), Tourist Reservation System (1), Train Scheduler App (1), Train Station Ticketing System (1), Travel Management System (2), Try My Recipe (2), URL Shortener (1), User Registration and Login System (3), Vehicle Management System (3), Vehicle Parking Management System (3), Vehicle Service Management System (23), Visitor Management System (2), Warehouse Management System (4), Water Billing System (3), Web-Based Student Clearance System (6), Wedding Guest e-Book (1), Wedding Hall Booking System (4), Workout Journal App (1), Yoga Class Registration System (5), Young Entrepreneur E-Negosyo System (7), Zoo Management System (4), eLearning System (3)

06/12/20247.16.7SourceCodester Employee and Visitor Gate Pass Logging System cross site scriptingUnknownProof-of-ConceptNot Defined0.000004.71CVE-2024-5897
06/12/20248.17.6SourceCodester Employee and Visitor Gate Pass Logging System save_users sql injectionUnknownProof-of-ConceptNot Defined0.000004.91CVE-2024-5896
06/12/20246.35.7SourceCodester Employee and Visitor Gate Pass Logging System delete_users sql injectionUnknownProof-of-ConceptNot Defined0.000005.20CVE-2024-5895
06/12/20246.35.7SourceCodester Online Eyewear Shop manage_product.php sql injectionUnknownProof-of-ConceptNot Defined0.000003.71CVE-2024-5894
06/12/20246.35.7SourceCodester Cab Management System sql injectionUnknownProof-of-ConceptNot Defined0.000003.86CVE-2024-5893
06/10/20245.45.2SourceCodester Online Medicine Ordering System Backend Setting denial of serviceUnknownNot DefinedNot Defined0.000430.14CVE-2024-32167
06/08/20246.36.0SourceCodester Vehicle Management System updatebill.php sql injectionUnknownProof-of-ConceptNot Defined0.000451.05CVE-2024-5775
06/08/20247.36.9SourceCodester Stock Management System Login index.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.80CVE-2024-5774
06/07/20246.36.1SourceCodester Pharmacy Medical Store Point of Sale System sql injectionMedical Device SoftwareNot DefinedNot Defined0.000000.12CVE-2024-36673
06/06/20246.36.1SourceCodester Stock Management System editCategories.php sql injectionUnknownNot DefinedNot Defined0.000000.05CVE-2024-36779
06/03/20246.35.7SourceCodester Gas Agency Management System editbrand.php sql injectionUnknownProof-of-ConceptNot Defined0.000000.00CVE-2024-36568
06/03/20246.35.7SourceCodester Gas Agency Management System editClientImage.php unrestricted uploadUnknownProof-of-ConceptNot Defined0.000000.09CVE-2024-36569
05/30/20246.36.3SourceCodester Codester Human Resource Management System sql injectionUnknownNot DefinedNot Defined0.000000.00CVE-2024-35469
05/30/20246.36.1SourceCodester Codester Human Resource Management System index.php sql injectionUnknownNot DefinedNot Defined0.000000.00CVE-2024-35468
05/30/20246.35.7SourceCodester Stock Management System createBrand.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.25CVE-2024-5515
05/28/20243.53.5SourceCodester Laboratory Management System cross site scriptingUnknownNot DefinedNot Defined0.000000.07CVE-2024-35581
05/28/20243.53.5SourceCodester Laboratory Management System cross site scriptingUnknownNot DefinedNot Defined0.000000.03CVE-2024-35583
05/28/20243.53.5SourceCodester Laboratory Management System cross site scriptingUnknownNot DefinedNot Defined0.000000.03CVE-2024-35582
05/28/20243.53.2SourceCodester Simple Online Bidding System save_category cross site scriptingUnknownProof-of-ConceptNot Defined0.000450.45CVE-2024-5437
05/28/20244.34.2SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgeryUnknownNot DefinedNot Defined0.000450.10CVE-2024-5428
05/25/20247.36.6SourceCodester Facebook News Feed Like index.php sql injectionSocial Network SoftwareProof-of-ConceptNot Defined0.000450.05CVE-2024-5384
05/25/20246.66.2SourceCodester School Intramurals Student Attendance Management System manage_sy.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.25CVE-2024-5378
05/25/20247.36.6SourceCodester Vehicle Management System newvehicle.php unrestricted uploadUnknownProof-of-ConceptNot Defined0.000450.11CVE-2024-5377
05/25/20246.35.7SourceCodester Best House Rental Management System edit-cate.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.40CVE-2024-5366
05/25/20246.35.7SourceCodester Best House Rental Management System manage_payment.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.15CVE-2024-5365
05/25/20246.35.7SourceCodester Best House Rental Management System manage_tenant.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.15CVE-2024-5364
05/25/20246.35.7SourceCodester Best House Rental Management System manage_user.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.15CVE-2024-5363
05/25/20247.36.6SourceCodester Online Hospital Management System departmentDoctor.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.05CVE-2024-5362
05/20/20246.35.7SourceCodester Vehicle Management System HTTP POST Request newdriver.php unrestricted uploadUnknownProof-of-ConceptNot Defined0.000450.15CVE-2024-5145
05/19/20246.35.7SourceCodester Electricity Consumption Monitoring Tool delete-bill.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.09CVE-2024-5134
05/19/20244.33.9SourceCodester Event Registration System cross site scriptingUnknownProof-of-ConceptNot Defined0.000450.00CVE-2024-5123
05/19/20247.36.6SourceCodester Event Registration System sql injectionUnknownProof-of-ConceptNot Defined0.000450.05CVE-2024-5122
05/19/20243.53.2SourceCodester Event Registration System cross site scriptingUnknownProof-of-ConceptNot Defined0.000450.15CVE-2024-5121
05/19/20246.35.7SourceCodester Event Registration System sql injectionUnknownProof-of-ConceptNot Defined0.000450.08CVE-2024-5120
05/19/20246.35.7SourceCodester Event Registration System sql injectionUnknownProof-of-ConceptNot Defined0.000450.10CVE-2024-5119
05/19/20247.36.6SourceCodester Event Registration System login.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.00CVE-2024-5118
05/19/20247.36.6SourceCodester Event Registration System portal.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.08CVE-2024-5117
05/19/20247.36.6SourceCodester Online Examination System save.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.30CVE-2024-5116
05/18/20246.35.7SourceCodester Simple Inventory System updateproduct.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.05CVE-2024-5101
05/18/20246.35.7SourceCodester Simple Inventory System tableedit.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.04CVE-2024-5100
05/18/20246.35.7SourceCodester Simple Inventory System updateprice.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.05CVE-2024-5099
05/18/20245.55.0SourceCodester Simple Inventory System login.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.40CVE-2024-5098
05/18/20244.33.9SourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgeryUnknownProof-of-ConceptNot Defined0.000450.35CVE-2024-5097
05/18/20247.36.6SourceCodester Best House Rental Management System view_payment.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.05CVE-2024-5094
05/18/20247.36.6SourceCodester Best House Rental Management System login.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.04CVE-2024-5093
05/17/20246.35.7SourceCodester Simple Online Mens Salon Management System view_service.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.05CVE-2024-5069
05/17/20246.86.1SourceCodester Gas Agency Management System edituser.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.10CVE-2024-5051
05/17/20247.36.6SourceCodester Student Management System controller.php unrestricted uploadUnknownProof-of-ConceptNot Defined0.000450.00CVE-2024-5047
05/17/20247.36.6SourceCodester Online Examination System registeracc.php sql injectionUnknownProof-of-ConceptNot Defined0.000450.85CVE-2024-5046
05/17/20245.34.8SourceCodester Online Birth Certificate Management System admin file accessUnknownProof-of-ConceptNot Defined0.000450.05CVE-2024-5045

1411 more entries are not shown

Do you need the next level of professionalism?

Upgrade your account now!