itsourcecode vulnerabilities

Products

• hospital management system 51
• sales and inventory system 36
• Tailoring Management System 32
• Apartment Management System 30
• Student Management System 26
• Online Tour and Travel Management System 20
• Society Management System 20
• Gym Management System 17
• school management system 17
• online cake ordering system 16
• University Management System 15
• Construction Management System 14
• Placement Management System 14
• Online Student Enrollment System 12
• leave management system 11
• online medicine delivery system 11
• payroll management system 11
• College Management System 10
• online blood bank management system 10
• Student Information Management System 10
• content management system 9
• COVID Tracking System 9
• fees management system 9
• online admission system 9
• Online Discussion Forum 9
• POS Point of Sale System 9
• Restaurant Management System 9
• Sports Management System 9
• airline reservation system 8
• Alton Management System 8

Latest itsourcecode CVEs

Newest publication first · page 10 of 29

1. CVE-2026-4612 itsourcecode Free Hotel Reservation System Parameter index.php sql injection

   Published 2026-03-23

   Medium·CVSS 6.9 EPSS 0.27%

   A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the component Parameter Handler. The manipulation of the argument account_id leads to sql injection. Remot...

2. CVE-2026-4485 itsourcecode College Management System search_student.php sql injection

   Published 2026-03-20

   Medium·CVSS 5.3 EPSS 0.26%

   A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/search_student.php. The manipulation of the argument Search leads to sql injection. The attack is possible to be carried out remotely. The...

3. CVE-2026-4474 itsourcecode University Management System admin_single_student_update.php cross site scripting

   Published 2026-03-20

   Medium·CVSS 4.8 EPSS 0.29%

   A flaw has been found in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_single_student_update.php. This manipulation of the argument st_name causes cross site scripting. The attack may be initiated remotely. The exploit has been...

4. CVE-2026-4473 itsourcecode Online Doctor Appointment System appointment_action.php sql injection

   Published 2026-03-20

   Medium·CVSS 5.1 EPSS 0.34%

   A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment_action.php. The manipulation of the argument appointment_id results in sql injection. The attack can be launched remotely....

5. CVE-2026-4472 itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection

   Published 2026-03-20

   Medium·CVSS 5.3 EPSS 0.33%

   A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admin_edit_supplier.php. The manipulation of the argument Supplier_Name leads to sql injection. The attack can be initiat...

6. CVE-2026-4471 itsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injection

   Published 2026-03-20

   Medium·CVSS 5.1 EPSS 0.40%

   A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /admin/admin_edit_employee.php. Executing a manipulation of the argument First_Name can lead to sql injection. It is possible to launch the attack remo...

7. CVE-2026-4470 itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection

   Published 2026-03-20

   Medium·CVSS 5.1 EPSS 0.34%

   A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_edit_menu.php. Performing a manipulation of the argument product_name results in sql injection. It is possibl...

8. CVE-2026-4469 itsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injection

   Published 2026-03-20

   Medium·CVSS 5.1 EPSS 0.34%

   A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_edit_menu_action.php. Such manipulation of the argument product_name leads to sql injection. The attack may...

9. CVE-2026-4356 itsourcecode University Management System add_result.php cross site scripting

   Published 2026-03-18

   Medium·CVSS 4.8 EPSS 0.21%

   A flaw has been found in itsourcecode University Management System 1.0. Affected is an unknown function of the file /add_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack may be launched remotely. The exploit has been published a...

10. CVE-2026-4241 itsourcecode College Management System time-table.php sql injection

    Published 2026-03-16

    Medium·CVSS 5.3 EPSS 0.22%

    A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/time-table.php. Such manipulation of the argument course_code leads to sql injection. The attack can be launched remotely. The exploit is p...

11. CVE-2026-4238 itsourcecode College Management System courses.php sql injection

    Published 2026-03-16

    Medium·CVSS 5.1 EPSS 0.23%

    A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/courses.php. The manipulation of the argument course_code leads to sql injection. It is possible to initiate the attack remotely. The exploi...

12. CVE-2026-4237 itsourcecode Free Hotel Reservation System index.php sql injection

    Published 2026-03-16

    Medium·CVSS 6.9 EPSS 0.30%

    A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/mod_reports/index.php. Executing a manipulation of the argument Home can lead to sql injection. The attack may be performed from remote. The e...

13. CVE-2026-4236 itsourcecode Online Enrollment System index.php sql injection

    Published 2026-03-16

    Medium·CVSS 6.9 EPSS 0.32%

    A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=add. Such manipulation of the argument txtsearch/deptname/name leads to sql injection. The attack may be performed from...

14. CVE-2026-4235 itsourcecode Online Enrollment System login.php sql injection

    Published 2026-03-16

    Medium·CVSS 6.9 EPSS 0.30%

    A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argument user_email causes sql injection. The attack is possible to be carried out remotely. The exploit ha...

15. CVE-2026-4223 itsourcecode Payroll Management System manage_employee.php sql injection

    Published 2026-03-16

    Medium·CVSS 6.9 EPSS 0.49%

    A vulnerability was identified in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /manage_employee.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly ava...

16. CVE-2026-4014 itsourcecode Cafe Reservation System Registration signup.php sql injection

    Published 2026-03-12

    Medium·CVSS 6.9 EPSS 0.43%

    A security flaw has been discovered in itsourcecode Cafe Reservation System 1.0. This impacts an unknown function of the file /curvus2/signup.php of the component Registration. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the...

17. CVE-2026-3993 itsourcecode Payroll Management System manage_employee_deductions.php cross site scripting

    Published 2026-03-12

    Medium·CVSS 5.3 EPSS 0.31%

    A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manage_employee_deductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely....

18. CVE-2026-3982 itsourcecode University Management System view_result.php cross site scripting

    Published 2026-03-12

    Medium·CVSS 5.3 EPSS 0.31%

    A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack can be executed remot...

19. CVE-2026-3981 itsourcecode Online Doctor Appointment System doctor_action.php sql injection

    Published 2026-03-12

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0. Affected is an unknown function of the file /admin/doctor_action.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit...

20. CVE-2026-3980 itsourcecode Online Doctor Appointment System patient_action.php sql injection

    Published 2026-03-12

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0. This impacts an unknown function of the file /admin/patient_action.php. Such manipulation of the argument patient_id leads to sql injection. The attack may be launched remotely. The exploit has b...

21. CVE-2026-3944 itsourcecode University Management System att_add.php sql injection

    Published 2026-03-11

    Medium·CVSS 6.9 EPSS 0.49%

    A vulnerability was determined in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /att_add.php. This manipulation of the argument Name causes sql injection. The attack may be initiated remotely. The exploit has been publicly disc...

22. CVE-2026-3812 itsourcecode Payroll Management System manage_employee_allowances.php cross site scripting

    Published 2026-03-09

    Medium·CVSS 5.3 EPSS 0.32%

    A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the argument ID causes cross site scripting. The attack is possible to be carried out remotely. The expl...

23. CVE-2026-3767 itsourcecode sanitize or validate this input teacher-attendance.php sql injection

    Published 2026-03-08

    Medium·CVSS 5.3 EPSS 0.30%

    A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacher_id can lead to sql injection. The attack may be launched remotely. The e...

24. CVE-2026-3765 itsourcecode University Management System att_single_view.php sql injection

    Published 2026-03-08

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was identified in itsourcecode University Management System 1.0. This affects an unknown function of the file /att_single_view.php. Such manipulation of the argument dt leads to sql injection. The attack can be launched remotely. The exploit is publicly available...

25. CVE-2026-3760 itsourcecode University Management System view_result.php sql injection

    Published 2026-03-08

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was detected in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /view_result.php. Performing a manipulation of the argument seme results in sql injection. The attack is possible to be carried out remotely. The exp...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.