Product by SourceCodester
Client Database Management System
13 known vulnerabilities in Client Database Management System (SourceCodester), 0 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2026-3762 | SourceCodester Client Database Management System: Incorrect Privilege Assignment | 7.3 | |
| High | CVE-2026-3764 | SourceCodester Client Database Management System superadmin_user_update.php improper authorization | 7.3 | |
| High | CVE-2026-3734 | SourceCodester Client Database Management System: Incorrect Privilege Assignment | 7.3 | |
| High | CVE-2025-5299 | SourceCodester Client Database Management System user_order_customer_update.php unrestricted upload | 7.3 | |
| Critical | CVE-2025-6160 | SourceCodester Client Database Management System user_customer_create_order.php sql injection | 7.3 | |
| Critical | CVE-2025-5002 | SourceCodester Client Database Management System user_proposal_update_order.php sql injection | 7.3 | |
| High | CVE-2025-4909 | SourceCodester Client Database Management System exposure of information through directory listing | 7.3 | |
| High | CVE-2025-4923 | SourceCodester Client Database Management System user_delivery_update.php unrestricted upload | 7.3 | |
| Critical | CVE-2025-4924 | SourceCodester Client Database Management System user_void_transaction.php sql injection | 7.3 | |
| High | CVE-2025-5840 | SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload | 7.3 | |
| Medium | CVE-2026-3761 | SourceCodester Client Database Management System: Incorrect Privilege Assignment | 5.4 | |
| High | CVE-2025-14885 | SourceCodester Client Database Management System Leads Generation user_leads.php unrestricted upload | 6.3 | |
| Critical | CVE-2025-5207 | SourceCodester Client Database Management System superadmin_update_profile.php sql injection | 4.7 |