# SourceCodester vulnerabilities

Source: https://junglewise.ai/threats/vendors/sourcecodester  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/sourcecodester.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 283 vulnerabilities in SourceCodester: 9 in the last 7 days and 131 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-127284, was published on 13 November 2026. 24 vulnerabilities in the last four weeks, down 52% on the four before (50). 27 technologies have a page of their own.

## Counts

- Last 7 days: 9
- Last 30 days: 18
- Last 90 days: 131
- All time: 283 (1 critical, 0 exploited in the wild)

## About SourceCodester

SourceCodester is a platform that provides free source code and tutorials for various programming languages and web applications.

## Latest SourceCodester vulnerabilities

- [CVE-2026-127284: SourceCodester Food Ordering System SQL injection in admin handler](https://junglewise.ai/threats/cve-2026-127284-a-security-flaw-has-been-discovered-in-sourcecodester-food) (high, CVSS 7.3, published 13 Nov 2026)
- [CVE-2026-127283: SourceCodester Food Ordering System unrestricted file upload](https://junglewise.ai/threats/cve-2026-127283-a-vulnerability-was-identified-in-sourcecodester-food-ordering) (high, CVSS 7.3, published 13 Nov 2026)
- [CVE-2026-127282: SourceCodester Smart Attendance System reflected XSS in reset_password.php](https://junglewise.ai/threats/cve-2026-127282-a-vulnerability-was-determined-in-sourcecodester-smart) (medium, CVSS 4.3, published 13 Nov 2026)
- [CVE-2026-125078: SourceCodester Smart Attendance System session fixation in login.php](https://junglewise.ai/threats/cve-2026-125078-a-security-flaw-has-been-discovered-in-sourcecodester-smart) (medium, CVSS 6.3, published 10 Nov 2026)
- [CVE-2026-125077: SourceCodester Smart Attendance System cross-site request forgery in student deletion](https://junglewise.ai/threats/cve-2026-125077-a-vulnerability-was-determined-in-sourcecodester-smart) (medium, CVSS 4.3, published 10 Nov 2026)
- [CVE-2026-125076: SourceCodester Smart Attendance System missing authentication in JSON endpoint](https://junglewise.ai/threats/cve-2026-125076-a-vulnerability-was-found-in-sourcecodester-smart-attendance) (high, CVSS 7.3, published 10 Nov 2026)
- [CVE-2026-125075: SourceCodester Smart Attendance System auth bypass in admin account creation](https://junglewise.ai/threats/cve-2026-125075-a-vulnerability-has-been-found-in-sourcecodester-smart) (high, CVSS 7.3, published 9 Nov 2026)
- [CVE-2026-125074: SourceCodester Smart Attendance System missing authentication in password reset](https://junglewise.ai/threats/cve-2026-125074-a-flaw-has-been-found-in-sourcecodester-smart-attendance-system) (high, CVSS 7.3, published 9 Nov 2026)
- [CVE-2026-124571: SourceCodester Simple CRUD using PHP and FPDF SQL injection in register.php](https://junglewise.ai/threats/cve-2026-124571-a-flaw-has-been-found-in-sourcecodester-simple-crud-using-php) (medium, CVSS 6.3, published 9 Nov 2026)
- [CVE-2026-116605: SourceCodester Online Food Ordering System client-side price enforcement](https://junglewise.ai/threats/cve-2026-116605-a-vulnerability-was-found-in-sourcecodester-online-food-ordering) (medium, CVSS 5.3, published 27 Oct 2026)
- [CVE-2026-116604: SourceCodester Online Food Ordering System missing authentication in admin delete endpoints](https://junglewise.ai/threats/cve-2026-116604-a-vulnerability-has-been-found-in-sourcecodester-online-food) (medium, CVSS 6.5, published 27 Oct 2026)
- [CVE-2026-116603: SourceCodester Online Food Ordering System unrestricted file upload in add_food.php](https://junglewise.ai/threats/cve-2026-116603-a-flaw-has-been-found-in-sourcecodester-online-food-ordering) (medium, CVSS 4.7, published 27 Oct 2026)
- [CVE-2026-116602: SourceCodester Online Food Ordering System path traversal in delete.php](https://junglewise.ai/threats/cve-2026-116602-a-vulnerability-was-detected-in-sourcecodester-online-food) (medium, CVSS 6.5, published 26 Oct 2026)
- [CVE-2026-116062: SourceCodester Performance Indicator System SQL injection in save_profile.php](https://junglewise.ai/threats/cve-2026-116062-a-security-flaw-has-been-discovered-in-sourcecodester) (high, CVSS 7.3, published 25 Oct 2026)
- [CVE-2026-116061: SourceCodester Performance Indicator System SQL injection in edit_dealer.php](https://junglewise.ai/threats/cve-2026-116061-a-vulnerability-was-identified-in-sourcecodester-performance) (high, CVSS 7.3, published 25 Oct 2026)
- [CVE-2026-116060: SourceCodester Performance Indicator System SQL injection](https://junglewise.ai/threats/cve-2026-116060-a-vulnerability-was-determined-in-sourcecodester-performance) (high, CVSS 7.3, published 25 Oct 2026)
- [CVE-2026-116055: SourceCodester Performance Indicator System SQL injection in deleteproduct.php](https://junglewise.ai/threats/cve-2026-116055-a-vulnerability-was-detected-in-sourcecodester-performance) (medium, CVSS 6.3, published 25 Oct 2026)
- [CVE-2026-114267: SourceCodester Food Order Management System missing authorization in admin endpoints](https://junglewise.ai/threats/cve-2026-114267-a-vulnerability-was-detected-in-sourcecodester-food-order) (high, CVSS 7.3, published 21 Oct 2026)
- [CVE-2026-109620: SourceCodester Online Reviewer System SQL injection in login](https://junglewise.ai/threats/cve-2026-109620-a-vulnerability-has-been-found-in-sourcecodester-online-reviewer) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-109607: SourceCodester Online Exam System SQL injection in login endpoint](https://junglewise.ai/threats/cve-2026-109607-a-flaw-has-been-found-in-sourcecodester-online-exam-system-1-0) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-109606: SourceCodester Art Gallery Management System SQL injection in account creation](https://junglewise.ai/threats/cve-2026-109606-a-vulnerability-was-detected-in-sourcecodester-art-gallery) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-109605: SourceCodester Simple Cafe Billing System improper authorization in user creation](https://junglewise.ai/threats/cve-2026-109605-a-security-vulnerability-has-been-detected-in-sourcecodester) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-108975: SourceCodester Library Management System pre-auth RCE via missing exit](https://junglewise.ai/threats/cve-2026-108975-a-security-flaw-has-been-discovered-in-sourcecodester-library) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-108974: SourceCodester E-Learning System SQL injection and unrestricted upload in Users.php](https://junglewise.ai/threats/cve-2026-108974-a-vulnerability-was-identified-in-sourcecodester-e-learning) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-108973: SourceCodester Contact Tracing System unauthenticated file upload and SQL injection](https://junglewise.ai/threats/cve-2026-108973-a-vulnerability-was-determined-in-sourcecodester-contact-tracing) (high, CVSS 7.3, published 13 Oct 2026)

## Most severe SourceCodester vulnerabilities

- [CVE-2026-36236: SourceCodester Engineers Online Portal SQL injection in update_password.php](https://junglewise.ai/threats/cve-2026-36236-sourcecodester-engineers-online-portal-sql-injection-in-update) (critical, CVSS 9.8, published 10 Apr 2026)
- [CVE-2026-86292: SourceCodester Simple Traffic Offense System auth bypass in user creation](https://junglewise.ai/threats/cve-2026-86292-sourcecodester-simple-traffic-offense-system-auth-bypass-in-user) (high, CVSS 7.3, published 7 Sep 2026)
- [CVE-2026-108972: SourceCodester Human Resource Management System authentication bypass in Employee Endpoint](https://junglewise.ai/threats/cve-2026-108972-a-vulnerability-was-found-in-sourcecodester-human-resource) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-86277: SourceCodester Syllabus-Aligned Learning Management System authorization bypass](https://junglewise.ai/threats/cve-2026-86277-sourcecodester-syllabus-aligned-learning-management-system) (high, CVSS 7.3, published 7 Sep 2026)
- [CVE-2026-90856: SourceCodester College Notes Gallery Management System privilege escalation in signup](https://junglewise.ai/threats/cve-2026-90856-sourcecodester-college-notes-gallery-management-system-privilege) (high, CVSS 7.3, published 15 Sep 2026)
- [CVE-2026-86276: SourceCodester Syllabus-Aligned Learning Management & Examination System hardcoded credentials and SQL injection](https://junglewise.ai/threats/cve-2026-86276-sourcecodester-syllabus-aligned-learning-management-examination) (high, CVSS 7.3, published 7 Sep 2026)
- [CVE-2026-85512: SourceCodester Class and Exam Timetabling System authorization bypass in /admin/session.php](https://junglewise.ai/threats/cve-2026-85512-sourcecodester-class-and-exam-timetabling-system-authorization) (high, CVSS 7.3, published 4 Sep 2026)
- [CVE-2026-109605: SourceCodester Simple Cafe Billing System improper authorization in user creation](https://junglewise.ai/threats/cve-2026-109605-a-security-vulnerability-has-been-detected-in-sourcecodester) (high, CVSS 7.3, published 13 Oct 2026)
- [CVE-2026-93972: SourceCodester Online Reviewer Management System SQL injection in courseID parameter](https://junglewise.ai/threats/cve-2026-93972-a-security-vulnerability-has-been-detected-in-sourcecodester) (high, CVSS 7.3, published 20 Sep 2026)
- [CVE-2026-90849: SourceCodester College Notes Gallery Management System SQL injection in login](https://junglewise.ai/threats/cve-2026-90849-sourcecodester-college-notes-gallery-management-system-sql) (high, CVSS 7.3, published 15 Sep 2026)

## Vulnerabilities per week

24 vulnerabilities in the last four weeks, down 52% on the four before (50).

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 15 | 0 | 0 |
| 24 Aug 2026 | 6 | 0 | 0 |
| 31 Aug 2026 | 10 | 0 | 0 |
| 7 Sep 2026 | 15 | 0 | 0 |
| 14 Sep 2026 | 25 | 0 | 0 |
| 21 Sep 2026 | 5 | 0 | 0 |
| 28 Sep 2026 | 7 | 0 | 0 |
| 5 Oct 2026 | 13 | 0 | 0 |
| 12 Oct 2026 | 15 | 0 | 0 |
| 19 Oct 2026 | 5 | 0 | 0 |
| 26 Oct 2026 | 4 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 9 | 0 | 0 |

## SourceCodester technologies

- [SourceCodester Class and Exam Timetabling System](https://junglewise.ai/threats/technologies/class-and-exam-timetabling-system): 56 vulnerabilities
- [SourceCodester Inventory Management System](https://junglewise.ai/threats/technologies/inventory-management-system): 16 vulnerabilities
- [SourceCodester Online Reviewer Management System](https://junglewise.ai/threats/technologies/online-reviewer-management-system): 15 vulnerabilities
- [SourceCodester Drug Recommendation System](https://junglewise.ai/threats/technologies/drug-recommendation-system): 13 vulnerabilities
- [SourceCodester Performance Indicator System](https://junglewise.ai/threats/technologies/performance-indicator-system): 10 vulnerabilities
- [SourceCodester Simple Online Food Ordering System](https://junglewise.ai/threats/technologies/simple-online-food-ordering-system): 10 vulnerabilities
- [SourceCodester Pharmacy Sales and Inventory System](https://junglewise.ai/threats/technologies/pharmacy-sales-and-inventory-system): 9 vulnerabilities
- [SourceCodester CET Automated Grading System with AI Predictive Analytics](https://junglewise.ai/threats/technologies/cet-automated-grading-system-with-ai-predictive-analytics): 7 vulnerabilities
- [SourceCodester Online Food Ordering System](https://junglewise.ai/threats/technologies/online-food-ordering-system): 7 vulnerabilities
- [SourceCodester Smart Attendance System with QR Code Scanner](https://junglewise.ai/threats/technologies/smart-attendance-system-with-qr-code-scanner): 7 vulnerabilities
- [SourceCodester Syllabus-Aligned Learning Management & Examination System](https://junglewise.ai/threats/technologies/syllabus-aligned-learning-management-examination-system): 7 vulnerabilities
- [SourceCodester Multi-Vendor Online Grocery Management System](https://junglewise.ai/threats/technologies/multi-vendor-online-grocery-management-system): 6 vulnerabilities
- [SourceCodester Online-Examination-And-Learning-Management-System](https://junglewise.ai/threats/technologies/online-examination-learning-management-system): 6 vulnerabilities
- [SourceCodester Pizzafy Ecommerce System](https://junglewise.ai/threats/technologies/pizzafy-ecommerce-system): 6 vulnerabilities
- [SourceCodester CASAP Automated Enrollment System](https://junglewise.ai/threats/technologies/casap-automated-enrollment-system): 5 vulnerabilities
- [SourceCodester Hospitals Patient Records Management System](https://junglewise.ai/threats/technologies/hospitals-patient-records-management-system): 5 vulnerabilities
- [SourceCodester Simple and Nice Shopping Cart Script](https://junglewise.ai/threats/technologies/simple-and-nice-shopping-cart-script): 5 vulnerabilities
- [SourceCodester Student Grades Management System](https://junglewise.ai/threats/technologies/student-grades-management-system): 5 vulnerabilities
- [SourceCodester Indian Invoicing System](https://junglewise.ai/threats/technologies/indian-invoicing-system): 4 vulnerabilities
- [SourceCodester Online Book Store System](https://junglewise.ai/threats/technologies/online-book-store-system): 4 vulnerabilities
- [SourceCodester Online Faculty Clearance System](https://junglewise.ai/threats/technologies/online-faculty-clearance-system): 4 vulnerabilities
- [SourceCodester School Registration and Fee System](https://junglewise.ai/threats/technologies/school-registration-and-fee-system): 4 vulnerabilities
- [SourceCodester Simple POS and Inventory System](https://junglewise.ai/threats/technologies/simple-pos-and-inventory-system): 4 vulnerabilities
- [SourceCodester College Notes Gallery Management System](https://junglewise.ai/threats/technologies/college-notes-gallery-management-system): 3 vulnerabilities
- [SourceCodester Hospital's Patient Records Management System](https://junglewise.ai/threats/technologies/hospital-s-patient-records-management-system): 3 vulnerabilities
- [SourceCodester Ship Ferry Ticket Reservation System](https://junglewise.ai/threats/technologies/ship-ferry-ticket-reservation-system): 3 vulnerabilities
- [SourceCodester Simple Traffic Offense System](https://junglewise.ai/threats/technologies/simple-traffic-offense-system): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "SourceCodester vulnerabilities", https://junglewise.ai/threats/vendors/sourcecodester, 13 November 2026.