A vulnerability was determined in itsourcecode Airline Reservation System 1.0. Affected is an unknown function of the file /admin/manage_flight.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been...
Vendor
itsourcecode vulnerabilities
309 published CVES affecting itsourcecode, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 309
- Critical
- 0
- High
- 0
- Medium
- 309
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- hospital management system 50
- sales and inventory system 34
- school management system 13
- Society Management System 13
- Construction Management System 12
- online medicine delivery system 11
- University Management System 11
- College Management System 10
- fees management system 9
- leave management system 9
- online admission system 9
- online cake ordering system 9
- courier management system 8
- Electronic Judging System 7
- free hotel reservation system 7
- online hotel management system 7
- payroll management system 7
- Event Management System 6
- Online Enrollment System 6
- content management system 5
- News Portal Project 5
- online frozen foods ordering system 5
- Student Management System 5
- baptism information management system 4
- Document Management System 4
- airline reservation system 3
- Online Doctor Appointment System 3
- online house rental system 3
- payroll system 3
- sales-and-inventory-system 3
Latest itsourcecode CVEs
Newest publication first · page 1 of 13
-
MediumCVSS 6.9
-
MediumCVSS 6.9
A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /admin_edit.php. The manipulation of the argument bookisbn with the input 1%27%20AND%20GTID_SUBSET(CONCAT(0x71717a6b71,(SELECT%20(ELT(6040=6040,1...
-
MediumCVSS 5.3
A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the file /admin/manage_booked.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been p...
-
MediumCVSS 5.3
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has be...
-
CVE-2026-116514 itsourcecode Airline Reservation System book_flight.php cross site scripting
PublishedMediumCVSS 5.3A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be executed remotely. The exploit has been made...
-
MediumCVSS 5.3
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made...
-
CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection
PublishedMediumCVSS 5.3 EPSS 0.32%A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been di...
-
MediumCVSS 5.3 EPSS 0.32%
A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit ha...
-
MediumCVSS 5.3 EPSS 0.21%
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to be carried out remotely. The exploit has bee...
-
MediumCVSS 5.3 EPSS 0.26%
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
-
MediumCVSS 5.3 EPSS 0.29%
A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/cust_searchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attac...
-
MediumCVSS 5.3 EPSS 0.25%
A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/cust_del.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remot...
-
MediumCVSS 5.3 EPSS 0.21%
A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/cust_edit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated rem...
-
MediumCVSS 5.3
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attack may be performed from remote. The exploit...
-
MediumCVSS 5.3
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exp...
-
MediumCVSS 5.3
A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiated remotely. The exploit has been made avail...
-
CVE-2026-108959 itsourcecode Online Cake Ordering System addtransacdetail.php sql injection
PublishedMediumCVSS 5.3A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The explo...
-
MediumCVSS 5.3
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit ha...
-
CVE-2026-108927 itsourcecode Baptism Information Management System pbaptism.php sql injection
PublishedMediumCVSS 5.3A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument b_id causes sql injection. It is possible to initiate the attack remotely. The exploit has...
-
CVE-2026-108926 itsourcecode Baptism Information Management System ebaptism.php sql injection
PublishedMediumCVSS 5.3A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been releas...
-
MediumCVSS 5.3
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and m...
-
MediumCVSS 6.9
A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been pu...
-
MediumCVSS 5.3
A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public a...
-
MediumCVSS 5.3
A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be use...
-
MediumCVSS 6.9
A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and m...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.