| CVE-2026-3752 | ALTO7.2 | A flaw has been found in SourceCodester Employee Task Management System up to 1.0. The affected element is an unknown function of the file /daily-task-report.php of the component GET Parameter Handler. This manipulation of the argument Date causes sql injection. It is possible to initiate the attack remotely. The explo | 08/03/2026 |
| CVE-2026-3751 | ALTO7.2 | A vulnerability was detected in SourceCodester Employee Task Management System 1.0. Impacted is an unknown function of the file /daily-attendance-report.php of the component GET Parameter Handler. The manipulation of the argument Date results in sql injection. The attack may be performed from remote. The exploit is now | 08/03/2026 |
| CVE-2026-3746 | CRÍTICO9.8 | A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. | 08/03/2026 |
| CVE-2026-3702 | MEDIO6.1 | A vulnerability was detected in SourceCodester Loan Management System 1.0. Affected by this issue is some unknown functionality of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. The attack is possible to be carried out remotely. The exploit is now public and may be | 08/03/2026 |
| CVE-2026-26892 | ALTO7.2 | Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php. | 03/03/2026 |
| CVE-2026-26891 | BAJO2.7 | Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php. | 03/03/2026 |
| CVE-2026-26889 | BAJO2.7 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php. | 03/03/2026 |
| CVE-2026-26888 | BAJO2.7 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php. | 03/03/2026 |
| CVE-2026-26887 | BAJO2.7 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php. | 03/03/2026 |
| CVE-2026-26890 | BAJO2.7 | Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_product.php. | 03/03/2026 |
| CVE-2026-26886 | BAJO2.7 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php. | 03/03/2026 |
| CVE-2026-26885 | BAJO2.7 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_service. | 03/03/2026 |
| CVE-2026-26884 | BAJO2.7 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php. | 03/03/2026 |
| CVE-2026-26883 | BAJO2.7 | Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete_appointment. | 03/03/2026 |
| CVE-2026-26707 | CRÍTICO9.8 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php. | 02/03/2026 |
| CVE-2026-26706 | CRÍTICO9.8 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php. | 02/03/2026 |
| CVE-2026-26705 | CRÍTICO9.8 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php. | 02/03/2026 |
| CVE-2026-26704 | CRÍTICO9.8 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php. | 02/03/2026 |
| CVE-2026-26708 | CRÍTICO9.8 | sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_user.php. | 02/03/2026 |
| CVE-2026-2848 | CRÍTICO9.8 | A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The e | 20/02/2026 |