Skip to content

SourceCodester · weakness class

Access Control

78 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 78 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. SourceCodester Music Gallery Site POST Request Users.php access controlCVE-2023-0963SourceCodester · CVSS 7.3 · 4.7% likely

    CWE-284

  2. SourceCodester Auto Dealer Management System Users.php access controlCVE-2023-0916SourceCodester · CVSS 6.3 · 3.1% likely

    CWE-284

  3. SourceCodester Insurance Management System direct requestCVE-2024-7080SourceCodester · CVSS 5.3 · 1.0% likely

    CWE-425

  4. SourceCodester Book Store Management System index.php access controlCVE-2022-4229SourceCodester · CVSS 7.3 · 1.0% likely

    CWE-284

  5. SourceCodester Alphaware Simple E-Commerce System Payment summary.php access controlCVE-2023-0998SourceCodester · CVSS 6.5 · 0.9% likely

    CWE-284

  6. SourceCodester Clinics Patient Management System user_images direct requestCVE-2024-7753SourceCodester · CVSS 5.3 · 0.9% likely

    CWE-425

  7. SourceCodester Best House Rental Management System POST Request ajax.php improper authorizationCVE-2024-11860SourceCodester · CVSS 6.5 · 0.9% likely

    CWE-266

  8. SourceCodester Human Resource Management System Content-Type employee.php unrestricted uploadCVE-2022-4273SourceCodester · CVSS 7.3 · 0.9% likely

    CWE-266

  9. SourceCodester Lost and Found Information System access controlCVE-2023-2670SourceCodester · CVSS 6.3 · 0.8% likely

    CWE-284

  10. SourceCodester Prison Management System New User Creation improper authorizationCVE-2022-2019SourceCodester · CVSS 7.3 · 0.8% likely

    CWE-285

  11. SourceCodester Simple Cold Storage Management System Avatar unrestricted uploadCVE-2022-3549SourceCodester · CVSS 4.7 · 0.8% likely

    CWE-266

  12. SourceCodester Lost and Found Information System access controlCVE-2023-3018SourceCodester · CVSS 6.3 · 0.7% likely

    CWE-284

  13. SourceCodester Garage Management System createUser.php access controlCVE-2022-2578SourceCodester · CVSS 6.3 · 0.7% likely

    CWE-284

  14. SourceCodester Online Eyewear Shop Cart Content Master.php improper ownership managementCVE-2024-8949SourceCodester · CVSS 6.3 · 0.7% likely

    CWE-282

  15. SourceCodester Best Fee Management System Add User admin_class.php save_user access controlCVE-2023-3599SourceCodester · CVSS 6.3 · 0.7% likely

    CWE-264

  16. SourceCodester Company Website CMS Cookie site-settings.php access controlCVE-2022-2702SourceCodester · CVSS 7.3 · 0.7% likely

    CWE-284

  17. SourceCodester Student Result Management System update_smtp.php access controlCVE-2026-2938SourceCodester · CVSS 7.3 · 0.6% likely

    CWE-266

  18. SourceCodester Student Result Management System Register Interface new_user access controlCVE-2025-5649SourceCodester · CVSS 5.3 · 0.6% likely

    CWE-266

  19. SourceCodester Employee Management System Leave delete-leave.php access controlCVE-2024-1011SourceCodester · CVSS 4.3 · 0.6% likely

    CWE-284

  20. SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted uploadCVE-2022-3436SourceCodester · CVSS 6.3 · 0.6% likely

    CWE-266

  21. SourceCodester Online Railway Reservation System view_details.php access controlCVE-2024-9321SourceCodester · CVSS 5.3 · 0.6% likely

    CWE-284

  22. SourceCodester Best Employee Management System Administrative Endpoint View_user.php access controlCVE-2025-0802SourceCodester · CVSS 7.3 · 0.6% likely

    CWE-266

  23. SourceCodester Yoga Class Registration System Add User Users.php improper authorizationCVE-2024-7851SourceCodester · CVSS 6.3 · 0.6% likely

    CWE-285

  24. SourceCodester Online Food Ordering System POST Request access controlCVE-2023-1432SourceCodester · CVSS 7.3 · 0.6% likely

    CWE-284

  25. SourceCodester Hospital Management System delete-account.php improper authorizationCVE-2024-11073SourceCodester · CVSS 4.3 · 0.6% likely

    CWE-266

  26. SourceCodester Simple Online Bidding System users.php improper authorizationCVE-2024-7799SourceCodester · CVSS 5.3 · 0.6% likely

    CWE-285

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.