Advisories · Technology

SourceCodester Engineers Online Portal.

Every CVE that names SourceCodester Engineers Online Portal among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-0351 CVE record

CVSS 3.1 Low

SourceCodester Engineers Online Portal session fixiation
- SourceCodester Engineers Online Portal
- Authentication bypass
Not analysed yet 9 Jan 2024
CVE-2024-0350 CVE record

CVSS 3.1 Low

SourceCodester Engineers Online Portal session expiration
- SourceCodester Engineers Online Portal
- Authentication bypass
Not analysed yet 9 Jan 2024
CVE-2024-0349 CVE record

CVSS 3.7 Low

SourceCodester Engineers Online Portal missing secure attribute
- SourceCodester Engineers Online Portal
- CWE-614
Not analysed yet 9 Jan 2024
CVE-2024-0348 CVE record

CVSS 4.3 Medium

SourceCodester Engineers Online Portal File Upload resource consumption
- SourceCodester Engineers Online Portal
- Denial of service
Not analysed yet 9 Jan 2024
CVE-2024-0347 CVE record

CVSS 3.7 Low

SourceCodester Engineers Online Portal signup_teacher.php weak password
- SourceCodester Engineers Online Portal
- Hard-coded credentials
Not analysed yet 9 Jan 2024
CVE-2024-0260 CVE record

CVSS 4.3 Medium

SourceCodester Engineers Online Portal Password Change change_password_teacher.php session expiration
- SourceCodester Engineers Online Portal
- Authentication bypass
Not analysed yet 7 Jan 2024
CVE-2024-0182 CVE record

CVSS 7.3 High

SourceCodester Engineers Online Portal Admin Login sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 1 Jan 2024
CVE-2023-7160 CVE record

CVSS 2.4 Low

SourceCodester Engineers Online Portal Add Engineer cross site scripting
- SourceCodester Engineers Online Portal
- Cross-site scripting (XSS)
Not analysed yet 29 Dec 2023
CVE-2023-5284 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload
- SourceCodester Engineers Online Portal
- Unrestricted file upload
Not analysed yet 29 Sept 2023
CVE-2023-5283 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal teacher_signup.php sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 29 Sept 2023
CVE-2023-5282 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal seed_message_student.php sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 29 Sept 2023
CVE-2023-5281 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal remove_inbox_message.php sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 29 Sept 2023
CVE-2023-5280 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal my_students.php sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 29 Sept 2023
CVE-2023-5279 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal my_classmates.php sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 29 Sept 2023
CVE-2023-5278 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal login.php sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 29 Sept 2023
CVE-2023-5277 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal student_avatar.php unrestricted upload
- SourceCodester Engineers Online Portal
- Unrestricted file upload
Not analysed yet 29 Sept 2023
CVE-2023-5276 CVE record

CVSS 6.3 Medium

SourceCodester Engineers Online Portal downloadable_student.php sql injection
- SourceCodester Engineers Online Portal
- SQL injection
Not analysed yet 29 Sept 2023