Itsourcecode vulnerabilities
Published CVEs affecting Itsourcecode products: 381 record(s), with severity, exploitation and fixes.
Hospital Management System 50Sales and Inventory System 34Student Management System 24School Management System 17Society Management System 15Construction Management System 12Online Medicine Delivery System 11University Management System 11Leave Management System 11College Management System 10COVID Tracking System 9Online Admission System 9Fees Management System 9Courier Management System 8Online Cake Ordering System 8Electronic Judging System 7Inventory Management System 7Payroll Management System 7Open Source Job Portal 7Free Hotel Reservation System 7Online Frozen Foods Ordering System 7Online Hotel Management System 7Online Enrollment System 6Event Management System 6Online Loan Management System 5News Portal Project 5Content Management System 5Web-based Internet Laboratory Management System 5Document Management System 4Student Transcript Processing System 4Baptism Information Management System 4Online Student Enrollment System 4Online Voting System 4Payroll System 3Sanitize Or Validate This Input 3Online Pet Shop Management System 3Online Doctor Appointment System 3Student Information System 3Online House Rental System 3Pet Shop Management System 2
CVE-2026-5237
High · 7.3
CWE-74 Mar 31, 2026
itsourcecode Payroll Management System Parameter manage_user.php sql injection
A security flaw has been discovered in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /manage_user.php of the component Parameter Handler. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-4966
Medium · 6.3
CWE-74 Mar 27, 2026
itsourcecode Free Hotel Reservation System index.php sql injection
A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.
CVE-2026-4877
Medium · 4.3
CWE-79 Mar 26, 2026
itsourcecode Payroll Management System index.php cross site scripting
A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0. This affects an unknown function of the file /index.php. Performing a manipulation of the argument page results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-4876
Medium · 6.3
CWE-74 Mar 26, 2026
itsourcecode Free Hotel Reservation System index.php sql injection
A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/mod_amenities/index.php?view=editpic. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
CVE-2026-4875
Medium · 4.7
CWE-284 Mar 26, 2026
itsourcecode Free Hotel Reservation System index.php unrestricted upload
A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. This manipulation of the argument image causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-4842
High · 7.3
CWE-74 Mar 26, 2026
itsourcecode Online Enrollment System Parameter index.php sql injection
A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/grades/index.php?view=edit&id=1 of the component Parameter Handler. The manipulation of the argument deptid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-4783
Medium · 6.3
CWE-74 Mar 24, 2026
itsourcecode College Management System Parameter add-single-student-results.php sql injection
A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/add-single-student-results.php of the component Parameter Handler. The manipulation of the argument course_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-4632
High · 7.3
CWE-74 Mar 24, 2026
itsourcecode Online Enrollment System Parameter index.php sql injection
A weakness has been identified in itsourcecode Online Enrollment System 1.0. This vulnerability affects unknown code of the file /sms/user/index.php?view=add of the component Parameter Handler. Executing a manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
CVE-2026-4614
Medium · 6.3
CWE-74 Mar 23, 2026
itsourcecode sanitize or validate this input Parameter subjects.php sql injection
A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. This manipulation of the argument subject_code causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2026-4612
High · 7.3
CWE-74 Mar 23, 2026
itsourcecode Free Hotel Reservation System Parameter index.php sql injection
A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the component Parameter Handler. The manipulation of the argument account_id leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
CVE-2026-4485
Medium · 6.3
CWE-74 Mar 20, 2026
itsourcecode College Management System search_student.php sql injection
A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/search_student.php. The manipulation of the argument Search leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-4474
Medium · 6.1
CWE-79 Mar 20, 2026
itsourcecode University Management System admin_single_student_update.php cross site scripting
A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_single_student_update.php. This manipulation of the argument st_name causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used.
CVE-2026-4473
Critical · 9.8
CWE-89 Mar 20, 2026
itsourcecode Online Doctor Appointment System appointment_action.php sql injection
A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment_action.php. The manipulation of the argument appointment_id results in sql injection. The attack can be launched remotely. The exploit is now public and may be used.
CVE-2026-4472
Critical · 9.8
CWE-89 Mar 20, 2026
itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection
A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admin_edit_supplier.php. The manipulation of the argument Supplier_Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CVE-2026-4471
Critical · 9.8
CWE-89 Mar 20, 2026
itsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injection
A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /admin/admin_edit_employee.php. Executing a manipulation of the argument First_Name can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-4470
Critical · 9.8
CWE-89 Mar 20, 2026
itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection
A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_edit_menu.php. Performing a manipulation of the argument product_name results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
CVE-2026-4469
Critical · 9.8
CWE-89 Mar 20, 2026
itsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injection
A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_edit_menu_action.php. Such manipulation of the argument product_name leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used.
CVE-2026-4356
Low · 2.4
CWE-79 Mar 17, 2026
itsourcecode University Management System add_result.php cross site scripting
A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used.
CVE-2026-4241
Medium · 6.3
CWE-74 Mar 16, 2026
itsourcecode College Management System time-table.php sql injection
A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/time-table.php. Such manipulation of the argument course_code leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVE-2026-4238
Medium · 4.7
CWE-74 Mar 16, 2026
itsourcecode College Management System courses.php sql injection
A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/courses.php. The manipulation of the argument course_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2026-4237
High · 7.3
CWE-74 Mar 16, 2026
itsourcecode Free Hotel Reservation System index.php sql injection
A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/mod_reports/index.php. Executing a manipulation of the argument Home can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used.
CVE-2026-4236
High · 7.3
CWE-74 Mar 16, 2026
itsourcecode Online Enrollment System index.php sql injection
A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=add. Such manipulation of the argument txtsearch/deptname/name leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
CVE-2026-4235
High · 7.3
CWE-74 Mar 16, 2026
itsourcecode Online Enrollment System login.php sql injection
A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argument user_email causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-4223
Critical · 9.8
CWE-89 Mar 16, 2026
itsourcecode Payroll Management System manage_employee.php sql injection
A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
CVE-2026-4014
Critical · 9.8
CWE-89 Mar 12, 2026
itsourcecode Cafe Reservation System Registration signup.php sql injection
A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.