CVE-2026-90615SourceCodester Class and Exam Timetabling System subject1.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/14/2026 Severity Medium CVE-2026-90526SourceCodester School Registration and Fee System save_class.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-90516SourceCodester School Registration and Fee System pay_report.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-90515SourceCodester School Registration and Fee System delete_stud.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-90514SourceCodester School Registration and Fee System save_stud.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-86298SourceCodester Class and Exam Timetabling System delete_subject.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/07/2026 Severity Medium CVE-2026-86294SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Simple Traffic Offense System Published 09/07/2026 Severity Medium CVE-2026-86293SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication Exploitation status Public exploit Fix Not confirmed Affected product S Simple Traffic Offense System Published 09/07/2026 Severity Medium CVE-2026-86292SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication Exploitation status Public exploit Fix Not confirmed Affected product S Simple Traffic Offense System Published 09/07/2026 Severity Medium CVE-2026-86290SourceCodester Online Voting System ajax.php save_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/07/2026 Severity Medium CVE-2026-86281SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86280SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86279SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86278SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86277SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86276SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86275SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86225SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86224SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86223SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86222SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86221SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86220SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86210SourceCodester Class and Exam Timetabling System delete_user_account.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86209SourceCodester Class and Exam Timetabling System delete_user.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86208SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86162SourceCodester Online Voting System ajax.php login sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-86161SourceCodester Online Voting System ajax.php delete_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-86160SourceCodester Online Voting System ajax.php delete_voting sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-86159SourceCodester Online Voting System ajax.php save_user sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-85512SourceCodester Class and Exam Timetabling System session.php authorization Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/04/2026 Severity Medium CVE-2026-82554SourceCodester Queue Management System add_customer.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product Q Queue Management System Published 08/30/2026 Severity Medium CVE-2026-81203SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/26/2026 Severity Medium CVE-2026-78248SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78247SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78199SourceCodester Simple Online Food Ordering System view_prod.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78198SourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78197SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78115SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/23/2026 Severity Medium CVE-2026-78060SourceCodester Stock Management System getOrderReport.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Stock Management System Published 08/23/2026 Severity Medium CVE-2026-78059SourceCodester Stock Management System printOrder.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Stock Management System Published 08/23/2026 Severity Medium CVE-2026-78055SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/23/2026 Severity Medium CVE-2026-78054SourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/23/2026 Severity Medium CVE-2026-77392SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection Exploitation status Public exploit Fix Not confirmed Affected product D Dynamic Input Field Generator Using HTML, CSS, and PHP Published 08/21/2026 Severity Medium CVE-2026-77391SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery Exploitation status Public exploit Fix Not confirmed Affected product D Dynamic Input Field Generator Using HTML, CSS, and PHP Published 08/21/2026 Severity Medium CVE-2026-76999SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization Exploitation status Public exploit Fix Not confirmed Affected product C CET Automated Grading System with AI Predictive Analytics Published 08/20/2026 Severity Medium CVE-2026-76998SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76997SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76996SourceCodester Simple Online Food Ordering System view_order.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76995SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76050SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/19/2026 Severity Medium CVE-2026-76049SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/19/2026 Severity Medium CVE-2026-76048SourceCodester Simple Online Food Ordering System ajax.php login sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/19/2026 Severity Medium CVE-2026-75151SourceCodester Onlne Examination & Learning Management System cross-site request forgery Exploitation status Not known exploited Fix Not confirmed Affected product O Onlne Examination & Learning Management System Published 08/18/2026 Severity Medium CVE-2026-75080SourceCodester Class and Exam Timetabling System edit_subject1.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/17/2026 Severity Medium CVE-2026-75079SourceCodester Class and Exam Timetabling System edit_subject2.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/17/2026 Severity Medium CVE-2026-75078SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/17/2026 Severity Medium CVE-2026-75077SourceCodester Class and Exam Timetabling System BSCE2.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/17/2026 Severity Medium CVE-2026-75014SourceCodester Pet Grooming Management Software get_barcode_data.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product P Pet Grooming Management Software Published 08/17/2026 Severity Medium CVE-2026-19987SourceCodester Best Employee Management System Profile exposure of information through directory listing Exploitation status Not known exploited Fix Not confirmed Affected product B Best Employee Management System Published 08/17/2026 Severity Medium CVE-2026-19925SourceCodester Stock Management System Master.php delete_supplier sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Stock Management System Published 08/16/2026 Severity Medium CVE-2026-19904SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product O Online Book Store System Published 08/15/2026 Severity Medium CVE-2026-19903SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access Exploitation status Public exploit Fix Not confirmed Affected product O Online Clothing Store Published 08/15/2026 Severity Medium CVE-2026-19899SourceCodester Class and Exam Timetabling System edit_teacher.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/15/2026 Severity Medium CVE-2026-19839SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product S Simple Doctors Appointment System Published 08/14/2026 Severity Medium CVE-2026-19825SourceCodester Simple Client Management System Master.php save_service sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Client Management System Published 08/14/2026 Severity Medium CVE-2026-19787SourceCodester Air Cargo Management System Master.php save_cargo_type sql injection Exploitation status Public exploit Fix Not confirmed Affected product A Air Cargo Management System Published 08/14/2026 Severity Medium CVE-2026-19710SourceCodester Simple Student Information System view_department.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Student Information System Published 08/13/2026 Severity Medium CVE-2026-19384SourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Doctors Appointment System Published 08/10/2026 Severity Medium CVE-2026-19231SourceCodester Simple Doctors Appointment System ajax.php delete_appointment sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Doctors Appointment System Published 08/07/2026 Severity Medium CVE-2026-19230SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product P Photo Share Website Published 08/07/2026 Severity Medium CVE-2026-19229SourceCodester Online Clothing Store Dreamweaver Metadata Files _notes file information disclosure Exploitation status Public exploit Fix Not confirmed Affected product O Online Clothing Store Published 08/07/2026 Severity Medium CVE-2026-19211SourceCodester Photo Share Website ajax.php signup sql injection Exploitation status Public exploit Fix Not confirmed Affected product P Photo Share Website Published 08/07/2026 Severity Medium CVE-2026-19210SourceCodester Photo Share Website ajax.php save_upload unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product P Photo Share Website Published 08/07/2026 Severity Medium CVE-2026-19209SourceCodester Photo Share Website index.php home cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product P Photo Share Website Published 08/07/2026 Severity Medium CVE-2026-19196SourceCodester Photo Share Website ajax.php login sql injection Exploitation status Public exploit Fix Not confirmed Affected product P Photo Share Website Published 08/07/2026 Severity Medium CVE-2026-19066SourceCodester Online Examination & Learning Management System view_students.php authorization Exploitation status Public exploit Fix Not confirmed Affected product O Online Examination & Learning Management System Published 08/06/2026 Severity Medium CVE-2026-19065SourceCodester Online Examination & Learning Management System upload_files.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product O Online Examination & Learning Management System Published 08/06/2026 Severity Medium CVE-2026-19064SourceCodester Online Examination & Learning Management System view.php authorization Exploitation status Not known exploited Fix Not confirmed Affected product O Online Examination & Learning Management System Published 08/06/2026 Severity Medium CVE-2026-19021SourceCodester Computer Repair Shop Management System Master.php delete_product sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Computer Repair Shop Management System Published 08/06/2026 Severity Medium CVE-2026-16486SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/21/2026 Severity Medium CVE-2026-16485SourceCodester Class and Exam Timetabling System class.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/21/2026 Severity Medium CVE-2026-16484SourceCodester Class and Exam Timetabling System edit_subjecta.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/21/2026 Severity Medium CVE-2026-16228SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/19/2026 Severity Medium CVE-2026-16227SourceCodester Class and Exam Timetabling System edit_subject.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/19/2026 Severity Medium CVE-2026-16226SourceCodester Pizzafy Ecommerce System admin_class_novo.php save_settings unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product P Pizzafy Ecommerce System Published 07/19/2026 Severity Medium CVE-2026-16203SourceCodester Class and Exam Timetabling System forCYS.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/19/2026 Severity Medium CVE-2026-16202SourceCodester Class and Exam Timetabling System CYS.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/19/2026 Severity Medium CVE-2026-16156SourceCodester Class and Exam Timetabling System forexam.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/18/2026 Severity Medium CVE-2026-16155SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/18/2026 Severity Medium CVE-2026-16154SourceCodester Class and Exam Timetabling System edit_room1.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/18/2026 Severity Medium CVE-2026-16152SourceCodester Class and Exam Timetabling System edit_rooma.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/18/2026 Severity Medium CVE-2026-15715SourceCodester Class and Exam Timetabling System exam.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/14/2026 Severity Medium CVE-2026-15703SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple and Nice Shopping Cart Script Published 07/14/2026 Severity Medium CVE-2026-15597SourceCodester Class and Exam Timetabling System edit_exam2.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/13/2026 Severity Medium CVE-2026-15596SourceCodester Class and Exam Timetabling System subject.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/13/2026 Severity Medium CVE-2026-15595SourceCodester Class and Exam Timetabling System forsubject.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 07/13/2026 Severity Medium CVE-2026-15540SourceCodester Online Book Store System Administrative index.php php file inclusion Exploitation status Public exploit Fix Not confirmed Affected product O Online Book Store System Published 07/13/2026 Severity Medium CVE-2026-15539SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product O Online Book Store System Published 07/13/2026 Severity Medium CVE-2026-15537SourceCodester Online Book Store System login.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Book Store System Published 07/13/2026 Severity Medium 
