LowCVSS 2.7
EPSS 0.23%
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.
Vendor
razormist vulnerabilities
76 published CVES affecting razormist, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 76
- Critical
- 10
- High
- 22
- Medium
- 41
- Low
- 3
- Unscored
- 0
- CISA KEV
- 0
Products
- online discussion forum site 16
- loan management system 11
- employee management system 9
- online polling system 7
- student result management system 6
- simple membership system 5
- basic library system 3
- phone contact manager system 3
- student record management system 3
- complaint management system 2
- health center patient record management system 2
- telecom billing management system 2
- airport booking management system 1
- display username after login 1
- payroll management system 1
- phone management system 1
- simple computer store system 1
- simple hotel booking system 1
- tourist reservation system 1
Latest razormist CVEs
Newest publication first · page 1 of 4
-
-
LowCVSS 2.7 EPSS 0.23%
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.
-
LowCVSS 2.7 EPSS 0.23%
Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.
-
MediumCVSS 5.3 EPSS 0.40%
A weakness has been identified in SourceCodester Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit ha...
-
MediumCVSS 6.9 EPSS 0.43%
A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to...
-
MediumCVSS 6.9 EPSS 0.43%
A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now publ...
-
MediumCVSS 6.9 EPSS 0.43%
A security vulnerability has been detected in SourceCodester Online Polling System 1.0. This impacts an unknown function of the file /registeracc.php. Such manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclos...
-
MediumCVSS 6.9 EPSS 0.44%
A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to...
-
CVE-2025-10075 SourceCodester Online Polling System manage-profile.php cross site scripting
PublishedMediumCVSS 5.1 EPSS 0.26%A security flaw has been discovered in SourceCodester Online Polling System 1.0. The impacted element is an unknown function of the file /manage-profile.php. The manipulation of the argument firstname results in cross site scripting. The attack can be launched remotely. The explo...
-
MediumCVSS 6.9 EPSS 0.56%
A vulnerability was detected in SourceCodester Online Polling System Code 1.0. This vulnerability affects unknown code of the file /admin/checklogin.php. The manipulation of the argument myusername results in sql injection. The attack may be performed from a remote location. The...
-
MediumCVSS 4.8 EPSS 0.34%
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /script/admin/system of the component System Settings Page. The manipulation of the argume...
-
MediumCVSS 4.8 EPSS 0.30%
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/manage_students of the component Manage Students Module. The manipulation leads to cross site scrip...
-
MediumCVSS 4.8 EPSS 0.36%
A vulnerability classified as problematic has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/announcement of the component Announcement Page. The manipulation of the argument Title leads to cross site s...
-
MediumCVSS 4.8 EPSS 0.36%
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /script/academic/division-system of the component Division System Page. The manipulation of the arg...
-
MediumCVSS 4.8 EPSS 0.37%
A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/core/update_profile of the component Profile Setting Page. The manipulation leads to cross site script...
-
MediumCVSS 6.9 EPSS 0.65%
A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /admin/core/new_user of the component Register Interface. The manipulation leads to improper access controls. It is possible to i...
-
MediumCVSS 6.9 EPSS 0.53%
A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /patient.php. The manipulation of the argument itr_no leads to sql injection. T...
-
CVE-2025-5371 SourceCodester Health Center Patient Record Management System admin.php sql injection
PublishedMediumCVSS 6.9 EPSS 0.57%A vulnerability, which was classified as critical, has been found in SourceCodester Health Center Patient Record Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin.php. The manipulation of the argument Username leads to sql inject...
-
MediumCVSS 6.9 EPSS 0.53%
A vulnerability classified as critical has been found in SourceCodester PHP Display Username After Login 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. Th...
-
MediumCVSS 4.8 EPSS 0.34%
A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has...
-
MediumCVSS 4.8 EPSS 0.38%
A vulnerability classified as critical has been found in SourceCodester Phone Management System 1.0. This affects the function main of the component Password Handler. The manipulation of the argument s leads to buffer overflow. Local access is required to approach this attack. Th...
-
MediumCVSS 4.8 EPSS 0.34%
A vulnerability classified as critical was found in SourceCodester Simple Hotel Booking System 1.0. This vulnerability affects the function Login. The manipulation of the argument uname leads to buffer overflow. It is possible to launch the attack on the local host. The exploit h...
-
MediumCVSS 4.8 EPSS 0.30%
A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /department.php of the component Department Page. The manipulation of the argument Department Na...
-
MediumCVSS 4.8 EPSS 0.35%
A vulnerability was found in SourceCodester Telecom Billing Management System 1.0. It has been rated as critical. This issue affects the function addrecords of the file main.cpp of the component Add New Record. The manipulation of the argument name/phonenumber leads to buffer ove...
-
CVE-2024-12355 SourceCodester Phone Contact Manager System ContactBook.cpp adding input validation
PublishedMediumCVSS 4.8 EPSS 0.31%A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs t...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.