itsourcecode vulnerabilities

Products

• hospital management system 51
• sales and inventory system 36
• Tailoring Management System 32
• Apartment Management System 30
• Student Management System 26
• Online Tour and Travel Management System 20
• Society Management System 20
• Gym Management System 17
• school management system 17
• online cake ordering system 16
• University Management System 15
• Construction Management System 14
• Placement Management System 14
• Online Student Enrollment System 12
• leave management system 11
• online medicine delivery system 11
• payroll management system 11
• College Management System 10
• online blood bank management system 10
• Student Information Management System 10
• content management system 9
• COVID Tracking System 9
• fees management system 9
• online admission system 9
• Online Discussion Forum 9
• POS Point of Sale System 9
• Restaurant Management System 9
• Sports Management System 9
• airline reservation system 8
• Alton Management System 8

Latest itsourcecode CVEs

Newest publication first · page 13 of 29

1. CVE-2026-1593 itsourcecode Society Management System edit_expenses_query.php sql injection

   Published 2026-01-29

   Medium·CVSS 6.9 EPSS 0.52%

   A weakness has been identified in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/edit_expenses_query.php. Executing a manipulation of the argument detail can lead to sql injection. The attack may be launch...

2. CVE-2026-1590 itsourcecode School Management System index.php sql injection

   Published 2026-01-29

   Medium·CVSS 6.9 EPSS 0.44%

   A vulnerability was identified in itsourcecode School Management System 1.0. This impacts an unknown function of the file /ramonsys/faculty/index.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit is publicly availab...

3. CVE-2026-1589 itsourcecode School Management System index.php sql injection

   Published 2026-01-29

   Medium·CVSS 6.9 EPSS 0.44%

   A vulnerability was determined in itsourcecode School Management System 1.0. This affects an unknown function of the file /ramonsys/inquiry/index.php. This manipulation of the argument txtsearch causes sql injection. The attack can be initiated remotely. The exploit has been publ...

4. CVE-2026-1551 itsourcecode School Management System controller.php sql injection

   Published 2026-01-28

   Medium·CVSS 5.3 EPSS 0.40%

   A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been...

5. CVE-2026-1545 itsourcecode School Management System index.php sql injection

   Published 2026-01-28

   Medium·CVSS 6.9 EPSS 0.43%

   A weakness has been identified in itsourcecode School Management System 1.0. The affected element is an unknown function of the file /course/index.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has...

6. CVE-2026-1176 itsourcecode School Management System index.php sql injection

   Published 2026-01-19

   Medium·CVSS 6.9 EPSS 0.39%

   A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has...

7. CVE-2026-1159 itsourcecode Online Frozen Foods Ordering System order_online.php sql injection

   Published 2026-01-19

   Medium·CVSS 6.9 EPSS 0.40%

   A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This issue affects some unknown processing of the file /order_online.php. Executing a manipulation of the argument product_name can lead to sql injection. The attack can be launched remotely....

8. CVE-2026-1135 itsourcecode Society Management System activity.php cross site scripting

   Published 2026-01-19

   Medium·CVSS 5.3 EPSS 0.36%

   A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. The exploit has been r...

9. CVE-2026-1134 itsourcecode Society Management System expenses.php cross site scripting

   Published 2026-01-19

   Medium·CVSS 5.3 EPSS 0.36%

   A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown function of the file /admin/expenses.php. The manipulation of the argument detail leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly ava...

10. CVE-2026-1119 itsourcecode Society Management System delete_activity.php sql injection

    Published 2026-01-18

    Medium·CVSS 6.9 EPSS 0.42%

    A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/delete_activity.php. Executing a manipulation of the argument activity_id can lead to sql injection. It is possible to launch the attack remotely. T...

11. CVE-2026-1118 itsourcecode Society Management System add_activity.php sql injection

    Published 2026-01-18

    Medium·CVSS 5.3 EPSS 0.35%

    A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/add_activity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack remotely. The exploit i...

12. CVE-2026-0582 itsourcecode Society Management System edit_activity_query.php sql injection

    Published 2026-01-05

    Medium·CVSS 5.3 EPSS 0.32%

    A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_query.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exploit is publicly avai...

13. CVE-2026-0544 itsourcecode School Management System index.php sql injection

    Published 2026-01-01

    Medium·CVSS 6.9 EPSS 0.39%

    A security flaw has been discovered in itsourcecode School Management System 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released...

14. CVE-2025-15354 itsourcecode Society Management System add_admin.php sql injection

    Published 2025-12-30

    Medium·CVSS 6.9 EPSS 0.39%

    A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/add_admin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit...

15. CVE-2025-15353 itsourcecode Society Management System edit_admin_query.php edit_admin_query sql injection

    Published 2025-12-30

    Medium·CVSS 6.9 EPSS 0.39%

    A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function edit_admin_query of the file /admin/edit_admin_query.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely...

16. CVE-2025-15168 itsourcecode Student Management System statistical.php sql injection

    Published 2025-12-29

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and migh...

17. CVE-2025-15167 itsourcecode Online Cake Ordering System detailtransac.php sql injection

    Published 2025-12-29

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /detailtransac.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

18. CVE-2025-15166 itsourcecode Online Cake Ordering System updatesupplier.php sql injection

    Published 2025-12-29

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown function of the file /updatesupplier.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made pu...

19. CVE-2025-15165 itsourcecode Online Cake Ordering System updatecustomer.php sql injection

    Published 2025-12-29

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. The impacted element is an unknown function of the file /updatecustomer.php?action=edit. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit h...

20. CVE-2025-15078 itsourcecode Student Management System list_report.php sql injection

    Published 2025-12-25

    Medium·CVSS 6.9 EPSS 0.38%

    A vulnerability was detected in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /list_report.php. The manipulation of the argument sy results in sql injection. The attack may be launched remotely. The exploit is now public and m...

21. CVE-2025-15077 itsourcecode Student Management System form137.php sql injection

    Published 2025-12-25

    Medium·CVSS 6.9 EPSS 0.38%

    A security vulnerability has been detected in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /form137.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been d...

22. CVE-2025-15075 itsourcecode Student Management System student_p.php sql injection

    Published 2025-12-25

    Medium·CVSS 6.9 EPSS 0.42%

    A security flaw has been discovered in itsourcecode Student Management System 1.0. This issue affects some unknown processing of the file /student_p.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has bee...

23. CVE-2025-15074 itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection

    Published 2025-12-25

    Medium·CVSS 6.9 EPSS 0.46%

    A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customer_details.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly avail...

24. CVE-2025-15073 itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection

    Published 2025-12-24

    Medium·CVSS 6.9 EPSS 0.42%

    A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contact_us.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publ...

25. CVE-2025-15034 itsourcecode Student Management System record.php sql injection

    Published 2025-12-23

    Medium·CVSS 6.9 EPSS 0.39%

    A security flaw has been discovered in itsourcecode Student Management System 1.0. This affects an unknown part of the file /record.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.