SourceCodester · weakness class
Insecure Direct Object Reference
12 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- likely to be exploited
- 1
Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.
- SourceCodester Clinic Queuing System LoginRegistration.php authorization
- SourceCodester Employee Task Management System update-employee.php authorization
- SourceCodester Employee Task Management System update-admin.php authorization
- SourceCodester Employee Task Management System task-details.php authorization
- SourceCodester Employee Task Management System edit-task.php authorization
- SourceCodester Best Employee Management System salary_slip.php authorization
- SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
- SourceCodester Leave Application System User Information index.php authorization
- SourceCodester Inventory Management System invoice.php authorization
- SourceCodester Online Examination & Learning Management System view_students.php authorization
- SourceCodester Online Examination & Learning Management System view.php authorization
- SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.