SourceCodester · weakness class
Access Control
78 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 78 is a mark on the map. Named now: 1 to 26, most at risk first.
- SourceCodester Music Gallery Site POST Request Users.php access control
- SourceCodester Auto Dealer Management System Users.php access control
- SourceCodester Insurance Management System direct request
- SourceCodester Book Store Management System index.php access control
- SourceCodester Alphaware Simple E-Commerce System Payment summary.php access control
- SourceCodester Clinics Patient Management System user_images direct request
- SourceCodester Best House Rental Management System POST Request ajax.php improper authorization
- SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload
- SourceCodester Lost and Found Information System access control
- SourceCodester Prison Management System New User Creation improper authorization
- SourceCodester Simple Cold Storage Management System Avatar unrestricted upload
- SourceCodester Lost and Found Information System access control
- SourceCodester Garage Management System createUser.php access control
- SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership management
- SourceCodester Best Fee Management System Add User admin_class.php save_user access control
- SourceCodester Company Website CMS Cookie site-settings.php access control
- SourceCodester Student Result Management System update_smtp.php access control
- SourceCodester Student Result Management System Register Interface new_user access control
- SourceCodester Employee Management System Leave delete-leave.php access control
- SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload
- SourceCodester Online Railway Reservation System view_details.php access control
- SourceCodester Best Employee Management System Administrative Endpoint View_user.php access control
- SourceCodester Yoga Class Registration System Add User Users.php improper authorization
- SourceCodester Online Food Ordering System POST Request access control
- SourceCodester Hospital Management System delete-account.php improper authorization
- SourceCodester Simple Online Bidding System users.php improper authorization
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.