Skip to content

SourceCodester · weakness class

Cross-Site Request Forgery

35 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 35 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. SourceCodester Sales Tracker Management System cross-site request forgeryCVE-2023-0999SourceCodester · CVSS 4.3 · 0.5% likely

    CWE-352

  2. SourceCodester Online Pizza Ordering System cross-site request forgeryCVE-2023-0988SourceCodester · CVSS 4.3 · 0.5% likely

    CWE-352

  3. SourceCodester Car Driving School Management System index.php save_users cross-site request forgeryCVE-2024-7661SourceCodester · CVSS 4.3 · 0.5% likely

    CWE-352

  4. SourceCodester Contact Manager App add.php cross-site request forgeryCVE-2023-4868SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  5. SourceCodester Take-Note App cross-site request forgeryCVE-2023-4865SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  6. SourceCodester Car Driving School Management System manag_package.php save_package cross-site request forgeryCVE-2024-7662SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  7. SourceCodester Contact Manager App update.php cross-site request forgeryCVE-2023-4869SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  8. SourceCodester Medicine Tracker System Password Change cross-site request forgeryCVE-2024-7226SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  9. SourceCodester Clinics Patient Management System User Page users.php cross-site request forgeryCVE-2024-7645SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  10. SourceCodester Simple Inventory System tableedit.php#page=editprice cross-site request forgeryCVE-2024-5097SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  11. SourceCodester Tracking Monitoring Management System ajax.php cross-site request forgeryCVE-2024-7360SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  12. SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgeryCVE-2024-11743SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  13. SourceCodester Online Student Clearance System cross-site request forgeryCVE-2025-4887SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  14. SourceCodester/oretnom23 Stock Management System Users.php cross-site request forgeryCVE-2025-4282SourceCodester · CVSS 4.3 · 0.4% likely

    CWE-352

  15. SourceCodester Insurance Management System cross-site request forgeryCVE-2024-8414SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  16. SourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgeryCVE-2024-6649SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  17. SourceCodester Simple Realtime Quiz System ajax.php cross-site request forgeryCVE-2024-7367SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  18. SourceCodester School Fees Payment System ajax.php cross-site request forgeryCVE-2024-7169SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  19. SourceCodester Simple Online Bidding System cross-site request forgeryCVE-2024-4929SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  20. SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgeryCVE-2024-5428SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  21. SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgeryCVE-2022-3121SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  22. SourceCodester Gym Management System cross-site request forgeryCVE-2025-6476SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  23. SourceCodester Pet Grooming Management Software cross-site request forgeryCVE-2025-11051SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  24. SourceCodester Computer Laboratory Management System cross-site request forgeryCVE-2026-3770SourceCodester · CVSS 4.3 · 0.3% likely

    CWE-352

  25. SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System cross-site request forgeryCVE-2026-1148SourceCodester · CVSS 4.3 · 0.2% likely

    CWE-352

  26. SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgeryCVE-2026-86281SourceCodester · CVSS 4.3 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in