Donbermoy develops a range of web-facing business and educational applications, including school management systems, e-commerce platforms, and mobile health applications, whose attack surface centers on input handling and file-upload mechanisms. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and recur through weakness classes including SQL injection, broader injection flaws, unrestricted file uploads, authentication bypass, and PHP remote file inclusion—patterns characteristic of web applications with insufficient input validation and access control. Defenders should prioritize patching this vendor's offerings when internet-exposed and enforce strong input sanitization and file-upload restrictions; live severity and exploitation figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Donbermoy over time
Signals from CVEs in this vendor scope (15 CVEs).
15 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-9833CRITICAL A vulnerability was detected in SourceCodester Online Farm Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/login.php. Performin | Sep 2, 2025 | 9.8 | 33 | NO | NO |
CVE-2024-8217CRITICAL A vulnerability has been found in SourceCodester E-Commerce Website 1.0 and classified as critical. This vulnerability affects unknown code of the file /Admin/registration.php. The | Aug 27, 2024 | 9.8 | 28 | NO | NO |
CVE-2025-9689HIGH A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/item_select. The mani | Aug 30, 2025 | 8.8 | 27 | NO | NO |
CVE-2025-4504CRITICAL A vulnerability was found in SourceCodester Online College Library System 1.0. It has been classified as critical. Affected is an unknown function of the file /index.php. The manip | May 10, 2025 | 9.8 | 27 | NO | NO |
CVE-2025-4314CRITICAL A vulnerability has been found in SourceCodester Advanced Web Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/in | May 6, 2025 | 9.8 | 26 | NO | NO |
CVE-2025-4313CRITICAL A vulnerability, which was classified as critical, was found in SourceCodester Advanced Web Store 1.0. Affected is an unknown function of the file /admin/admin_addnew_product.php. | May 6, 2025 | 9.8 | 26 | NO | NO |
CVE-2025-4312CRITICAL A vulnerability, which was classified as critical, has been found in SourceCodester Advanced Web Store 1.0. This issue affects some unknown processing of the file /productdetail.ph | May 6, 2025 | 9.8 | 26 | NO | NO |
CVE-2025-9690HIGH A flaw has been found in SourceCodester Advanced School Management System 1.0. This affects an unknown function of the file /index.php/stock/vendordetails. This manipulation of the | Aug 30, 2025 | 8.8 | 25 | NO | NO |
CVE-2024-30849CRITICAL Arbitrary file upload vulnerability in Sourcecodester Complete E-Commerce Site v1.0, allows remote attackers to execute arbitrary code via filename parameter in admin/products_phot | Apr 5, 2024 | 9.8 | 24 | NO | NO |
CVE-2024-4946HIGH A vulnerability was found in SourceCodester Online Art Gallery Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality o | May 16, 2024 | 8.8 | 23 | NO | NO |
Signals from CVEs in this vendor scope (15 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Donbermoy.
Media articles that mention a CVE ID that affects a product developed by Donbermoy — matched by CVE ID, not by vendor name.