File and Path Handling

Every one of the 157 is a mark on the map. Named now: 1 to 26, most at risk first.

1. SourceCodester Clinic Queuing System GET Parameter index.php file inclusionCVE-2024-0265SourceCodester · CVSS 6.3 · 21% likely

   CWE-73

2. SourceCodester Online Computer and Laptop Store index.php unrestricted uploadCVE-2023-1826SourceCodester · CVSS 6.3 · 4.4% likely

   CWE-434

3. SourceCodester Online Pizza Ordering System unrestricted uploadCVE-2023-2246SourceCodester · CVSS 6.3 · 3.6% likely

   CWE-434

4. SourceCodester Clinics Patient Management System unrestricted uploadCVE-2022-2297SourceCodester · CVSS 6.3 · 3.4% likely

   CWE-434

5. SourceCodester Best POS Management System Image save_settings unrestricted uploadCVE-2023-0943SourceCodester · CVSS 4.7 · 2.3% likely

   CWE-434

6. SourceCodester Online Student Clearance System edit-photo.php unrestricted uploadCVE-2025-4468SourceCodester · CVSS 7.3 · 1.3% likely

   CWE-434

7. SourceCodester Music Gallery Site unrestricted uploadCVE-2024-2930SourceCodester · CVSS 7.3 · 1.2% likely

   CWE-434

8. SourceCodester Student Study Center Desk Management System index.php file inclusionCVE-2023-2152SourceCodester · CVSS 5.3 · 1.2% likely

   CWE-73

9. SourceCodester Open Source Clinic Management System setting.php unrestricted uploadCVE-2024-4809SourceCodester · CVSS 6.3 · 1.2% likely

   CWE-434

10. SourceCodester Online Hotel Reservation System controller.php upload unrestricted uploadCVE-2024-10410SourceCodester · CVSS 6.3 · 1.2% likely

    CWE-434

11. SourceCodester Online Computer and Laptop Store unrestricted uploadCVE-2024-4820SourceCodester · CVSS 6.3 · 1.1% likely

    CWE-434

12. SourceCodester Student Study Center Desk Management System POST Parameter path traversalCVE-2023-1467SourceCodester · CVSS 6.5 · 1.1% likely

    CWE-22

13. SourceCodester Online Computer and Laptop Store Image path traversalCVE-2023-1956SourceCodester · CVSS 5.4 · 1.1% likely

    CWE-22

14. SourceCodester Best Church Management Software profile_crud.php path traversalCVE-2025-1599SourceCodester · CVSS 5.4 · 1.1% likely

    CWE-24

15. SourceCodester Prison Management System Avatar add-admin.php unrestricted uploadCVE-2024-3437SourceCodester · CVSS 7.3 · 1.1% likely

    CWE-434

16. SourceCodester Pharmacy Management System manage_website.php unrestricted uploadCVE-2023-4186SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-434

17. SourceCodester Online Discussion Forum Site uupdate.php unrestricted uploadCVE-2024-2690SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-434

18. SourceCodester Pisay Online E-Learning System controller.php unrestricted uploadCVE-2024-4349SourceCodester · CVSS 7.3 · 1.0% likely

    CWE-434

19. SourceCodester Zoo Management System apply_vacancy.php unrestricted uploadCVE-2022-2804SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-434

20. SourceCodester Engineers Online Portal upload_save_student.php unrestricted uploadCVE-2023-5284SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-434

21. SourceCodester Library Management System /card/index.php unrestricted uploadCVE-2022-2212SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-434

22. SourceCodester Web-based Pharmacy Product Management System add-product.php unrestricted uploadCVE-2025-3783SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-434

23. SourceCodester Inventory Management System index.php file inclusionCVE-2023-4749SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-73

24. SourceCodester Engineers Online Portal student_avatar.php unrestricted uploadCVE-2023-5277SourceCodester · CVSS 6.3 · 1.0% likely

    CWE-434

25. SourceCodester Student Management System controller.php unrestricted uploadCVE-2024-5047SourceCodester · CVSS 7.3 · 0.9% likely

    CWE-434

26. SourceCodester Medicine Tracking System path traversalCVE-2023-7134SourceCodester · CVSS 6.3 · 0.9% likely

    CWE-24

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.