CVE-2026-105247SourceCodester Online Reviewer Management System btn_functions.php course sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 10/05/2026 Severity Medium CVE-2026-105246SourceCodester Online Reviewer Management System btn_functions.php update sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 10/05/2026 Severity Medium CVE-2026-105182SourceCodester Online Reviewer Management System btn_functions.php update sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 10/05/2026 Severity Medium CVE-2026-105179SourceCodester Drug Recommendation System Password add_user.php missing encryption Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 10/05/2026 Severity Medium CVE-2026-105178SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection Exploitation status Not confirmed Fix Not confirmed Affected product D Drug Recommendation System Published 10/05/2026 Severity Medium CVE-2026-105177SourceCodester Drug Recommendation System Drug Creation add_drug.php sql injection Exploitation status Not known exploited Fix Not confirmed Affected product D Drug Recommendation System Published 10/05/2026 Severity Medium CVE-2026-105176SourceCodester Drug Recommendation System edit_class.php sql injection Exploitation status Not known exploited Fix Not confirmed Affected product D Drug Recommendation System Published 10/05/2026 Severity Medium CVE-2026-105175SourceCodester Drug Recommendation System Student Registration add_student.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 10/05/2026 Severity Medium CVE-2026-104612SourceCodester Student Result Management System Announcement new_announcement.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Student Result Management System Published 10/02/2026 Severity Medium CVE-2026-104123SourceCodester Online Reviewer Management System btn_functions.php activity sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 10/02/2026 Severity Medium CVE-2026-102913SourceCodester Car Driving School Management System Master.php save_enrollment sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Car Driving School Management System Published 09/30/2026 Severity Medium CVE-2026-102912SourceCodester Online Leave Management System page reports sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Leave Management System Published 09/30/2026 Severity Medium CVE-2026-102910SourceCodester Online Reviewer Management System exam-delete.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/30/2026 Severity Medium CVE-2026-102909SourceCodester Online Reviewer Management System btn_functions.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/30/2026 Severity Medium CVE-2026-102908SourceCodester Online Reviewer Management System questions-view.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/30/2026 Severity Medium CVE-2026-95957SourceCodester Smart Attendance System with QR Code Scanner Self-Registration student_signup.php prepend cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Smart Attendance System with QR Code Scanner Published 09/23/2026 Severity Medium CVE-2026-95927SourceCodester Online Reviewer Management System exam-delete.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/23/2026 Severity Medium CVE-2026-95926SourceCodester Online Reviewer Management System btn_functions.php update sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/23/2026 Severity Medium CVE-2026-95925SourceCodester Online Reviewer Management System btn_functions.php update sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/23/2026 Severity Medium CVE-2026-95924SourceCodester Online Reviewer Management System btn_functions.php add sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/23/2026 Severity Medium CVE-2026-94035SourceCodester Drug Recommendation System index.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 09/20/2026 Severity Medium CVE-2026-94034SourceCodester Drug Recommendation System Password Change change_password cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 09/20/2026 Severity Medium CVE-2026-94033SourceCodester Drug Recommendation System User Management add_user cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 09/20/2026 Severity Medium CVE-2026-94016SourceCodester Drug Recommendation System add_symptom cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 09/20/2026 Severity Medium CVE-2026-94015SourceCodester Drug Recommendation System edit_user.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 09/20/2026 Severity Medium CVE-2026-93997SourceCodester Drug Recommendation System edit_symptom.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 09/20/2026 Severity Medium CVE-2026-93974SourceCodester Online Reviewer Management System btn_functions.php remove sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/20/2026 Severity Medium CVE-2026-93973SourceCodester Online Reviewer Management System btn_functions.php remove sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/20/2026 Severity Medium CVE-2026-93972SourceCodester Online Reviewer Management System btn_functions.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/20/2026 Severity Medium CVE-2026-93959SourceCodester Online Reviewer Management System btn_functions.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Reviewer Management System Published 09/20/2026 Severity Medium CVE-2026-92927SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure Exploitation status Public exploit Fix Not confirmed Affected product D Drug Recommendation System Published 09/17/2026 Severity Medium CVE-2026-92406SourceCodester Inventory and Monitoring System btn_functions.php add sql injection Exploitation status Public exploit Fix Not confirmed Affected product I Inventory and Monitoring System Published 09/16/2026 Severity Medium CVE-2026-92405SourceCodester Inventory and Monitoring System index.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product I Inventory and Monitoring System Published 09/16/2026 Severity Medium CVE-2026-92385SourceCodester Online Food Ordering System Category Update update_category.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product O Online Food Ordering System Published 09/16/2026 Severity Medium CVE-2026-91005SourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product O Online Faculty Clearance System Published 09/15/2026 Severity Medium CVE-2026-91004SourceCodester Online Faculty Clearance System delete_faculty1.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Faculty Clearance System Published 09/15/2026 Severity Medium CVE-2026-90877SourceCodester Online Faculty Clearance System update_requirement_status.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Faculty Clearance System Published 09/15/2026 Severity Medium CVE-2026-90876SourceCodester Online Faculty Clearance System delete_requirement.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Faculty Clearance System Published 09/15/2026 Severity Medium CVE-2026-90857SourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product C College Notes Gallery Management System Published 09/15/2026 Severity Medium CVE-2026-90856SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management Exploitation status Public exploit Fix Not confirmed Affected product C College Notes Gallery Management System Published 09/15/2026 Severity Medium CVE-2026-90855SourceCodester/katojkalemba Online Food Ordering System order.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Food Ordering System Published 09/15/2026 Severity Medium CVE-2026-90854SourceCodester/katojkalemba Online Food Ordering System category-foods.php sql injection Exploitation status Not known exploited Fix Not confirmed Affected product O Online Food Ordering System Published 09/15/2026 Severity Medium CVE-2026-90849SourceCodester College Notes Gallery Management System login.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C College Notes Gallery Management System Published 09/15/2026 Severity Medium CVE-2026-90697SourceCodester Inventory Management System invoice.php authorization Exploitation status Public exploit Fix Not confirmed Affected product I Inventory Management System Published 09/14/2026 Severity Medium CVE-2026-90696SourceCodester Inventory Management System Product Management products_handler.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product I Inventory Management System Published 09/14/2026 Severity Medium CVE-2026-90695SourceCodester Inventory Management System Vendor Management vendors_handler.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product I Inventory Management System Published 09/14/2026 Severity Medium CVE-2026-90694SourceCodester Inventory Management System Customer Management customers_handler.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product I Inventory Management System Published 09/14/2026 Severity Medium CVE-2026-90615SourceCodester Class and Exam Timetabling System subject1.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/14/2026 Severity Medium CVE-2026-90526SourceCodester School Registration and Fee System save_class.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-90516SourceCodester School Registration and Fee System pay_report.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-90515SourceCodester School Registration and Fee System delete_stud.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-90514SourceCodester School Registration and Fee System save_stud.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S School Registration and Fee System Published 09/13/2026 Severity Medium CVE-2026-86298SourceCodester Class and Exam Timetabling System delete_subject.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/07/2026 Severity Medium CVE-2026-86294SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Simple Traffic Offense System Published 09/07/2026 Severity Medium CVE-2026-86293SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication Exploitation status Public exploit Fix Not confirmed Affected product S Simple Traffic Offense System Published 09/07/2026 Severity Medium CVE-2026-86292SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication Exploitation status Public exploit Fix Not confirmed Affected product S Simple Traffic Offense System Published 09/07/2026 Severity Medium CVE-2026-86290SourceCodester Online Voting System ajax.php save_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/07/2026 Severity Medium CVE-2026-86281SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86280SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86279SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86278SourceCodester Syllabus-Aligned Learning Management & Examination System manage_subjects.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86277SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86276SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86275SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management Exploitation status Public exploit Fix Not confirmed Affected product S Syllabus-Aligned Learning Management & Examination System Published 09/07/2026 Severity Medium CVE-2026-86225SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86224SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86223SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86222SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86221SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86220SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86210SourceCodester Class and Exam Timetabling System delete_user_account.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86209SourceCodester Class and Exam Timetabling System delete_user.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86208SourceCodester Class and Exam Timetabling System delete_teacher.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/06/2026 Severity Medium CVE-2026-86162SourceCodester Online Voting System ajax.php login sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-86161SourceCodester Online Voting System ajax.php delete_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-86160SourceCodester Online Voting System ajax.php delete_voting sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-86159SourceCodester Online Voting System ajax.php save_user sql injection Exploitation status Public exploit Fix Not confirmed Affected product O Online Voting System Published 09/06/2026 Severity Medium CVE-2026-85512SourceCodester Class and Exam Timetabling System session.php authorization Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 09/04/2026 Severity Medium CVE-2026-82554SourceCodester Queue Management System add_customer.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product Q Queue Management System Published 08/30/2026 Severity Medium CVE-2026-81203SourceCodester Simple Online Food Ordering System ajax.php login2 sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/26/2026 Severity Medium CVE-2026-78248SourceCodester Simple Online Food Ordering System ajax.php save_settings sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78247SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78199SourceCodester Simple Online Food Ordering System view_prod.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78198SourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78197SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/24/2026 Severity Medium CVE-2026-78115SourceCodester Class and Exam Timetabling System User Account Update edit_user_account.php improper authorization Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/23/2026 Severity Medium CVE-2026-78060SourceCodester Stock Management System getOrderReport.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Stock Management System Published 08/23/2026 Severity Medium CVE-2026-78059SourceCodester Stock Management System printOrder.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product S Stock Management System Published 08/23/2026 Severity Medium CVE-2026-78055SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/23/2026 Severity Medium CVE-2026-78054SourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting Exploitation status Public exploit Fix Not confirmed Affected product C Class and Exam Timetabling System Published 08/23/2026 Severity Medium CVE-2026-77392SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection Exploitation status Public exploit Fix Not confirmed Affected product D Dynamic Input Field Generator Using HTML, CSS, and PHP Published 08/21/2026 Severity Medium CVE-2026-77391SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery Exploitation status Public exploit Fix Not confirmed Affected product D Dynamic Input Field Generator Using HTML, CSS, and PHP Published 08/21/2026 Severity Medium CVE-2026-76999SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization Exploitation status Public exploit Fix Not confirmed Affected product C CET Automated Grading System with AI Predictive Analytics Published 08/20/2026 Severity Medium CVE-2026-76998SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76997SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76996SourceCodester Simple Online Food Ordering System view_order.php sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76995SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/20/2026 Severity Medium CVE-2026-76050SourceCodester Simple Online Food Ordering System ajax.php delete_menu sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/19/2026 Severity Medium CVE-2026-76049SourceCodester Simple Online Food Ordering System ajax.php save_menu sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/19/2026 Severity Medium CVE-2026-76048SourceCodester Simple Online Food Ordering System ajax.php login sql injection Exploitation status Public exploit Fix Not confirmed Affected product S Simple Online Food Ordering System Published 08/19/2026 Severity Medium 
