itsourcecode vulnerabilities

Products

• hospital management system 51
• sales and inventory system 36
• Tailoring Management System 32
• Apartment Management System 30
• Student Management System 26
• Online Tour and Travel Management System 20
• Society Management System 20
• Gym Management System 17
• school management system 17
• online cake ordering system 16
• University Management System 15
• Construction Management System 14
• Placement Management System 14
• Online Student Enrollment System 12
• leave management system 11
• online medicine delivery system 11
• payroll management system 11
• College Management System 10
• online blood bank management system 10
• Student Information Management System 10
• content management system 9
• COVID Tracking System 9
• fees management system 9
• online admission system 9
• Online Discussion Forum 9
• POS Point of Sale System 9
• Restaurant Management System 9
• Sports Management System 9
• airline reservation system 8
• Alton Management System 8

Latest itsourcecode CVEs

Newest publication first · page 18 of 29

1. CVE-2025-10063 itsourcecode POS Point of Sale System deferred_table.php cross site scripting

   Published 2025-09-06

   Medium·CVSS 5.3 EPSS 0.41%

   A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unit_testing/templates/deferred_table.php. The manipulation of the argument scripts leads to cross site scripting. R...

2. CVE-2025-10062 itsourcecode Student Information Management System login.php sql injection

   Published 2025-09-06

   Medium·CVSS 6.9 EPSS 0.45%

   A vulnerability was determined in itsourcecode Student Information Management System 1.0. This affects an unknown part of the file /admin/login.php. Executing manipulation of the argument uname can lead to sql injection. The attack may be launched remotely. The exploit has been p...

3. CVE-2025-10033 itsourcecode Online Discussion Forum admin sql injection

   Published 2025-09-06

   Medium·CVSS 6.9 EPSS 0.47%

   A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the publi...

4. CVE-2025-10029 itsourcecode POS Point of Sale System complex_header_2.php cross site scripting

   Published 2025-09-06

   Medium·CVSS 5.1 EPSS 0.31%

   A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unit_testing/templates/complex_header_2.php. Performing manipulation of the argument scripts results in cross s...

5. CVE-2025-10028 itsourcecode POS Point of Sale System 6776.php cross site scripting

   Published 2025-09-06

   Medium·CVSS 5.1 EPSS 0.31%

   A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an unknown part of the file /inventory/main/vendors/datatables/unit_testing/templates/6776.php. Such manipulation of the argument scripts leads to cross site scripting. The attack can be lau...

6. CVE-2025-10027 itsourcecode POS Point of Sale System 2512.php cross site scripting

   Published 2025-09-05

   Medium·CVSS 5.1 EPSS 0.31%

   A vulnerability was determined in itsourcecode POS Point of Sale System 1.0. Affected by this issue is some unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/2512.php. This manipulation of the argument scripts causes cross site scripting....

7. CVE-2025-10026 itsourcecode POS Point of Sale System -complex_header.php cross site scripting

   Published 2025-09-05

   Medium·CVSS 5.1 EPSS 0.31%

   A vulnerability was found in itsourcecode POS Point of Sale System 1.0. Affected by this vulnerability is an unknown functionality of the file /inventory/main/vendors/datatables/unit_testing/templates/-complex_header.php. The manipulation of the argument scripts results in cross...

8. CVE-2025-9840 itsourcecode Sports Management System gametype.php sql injection

   Published 2025-09-02

   Medium·CVSS 5.3 EPSS 0.37%

   A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/gametype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has be...

9. CVE-2025-9839 itsourcecode Student Information Management System index.php sql injection

   Published 2025-09-02

   Medium·CVSS 6.9 EPSS 0.44%

   A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/course/index.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the...

10. CVE-2025-9838 itsourcecode Student Information Management System index.php sql injection

    Published 2025-09-02

    Medium·CVSS 6.9 EPSS 0.44%

    A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is...

11. CVE-2025-9837 itsourcecode Student Information Management System index.php sql injection

    Published 2025-09-02

    Medium·CVSS 6.9 EPSS 0.44%

    A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules/student/index.php. This manipulation of the argument studentId causes sql injection. The attack may be initiated remotel...

12. CVE-2025-9793 itsourcecode Apartment Management System Setting admin.php sql injection

    Published 2025-09-01

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /setting/admin.php of the component Setting Handler. Performing manipulation of the argument ddlBranch results in sql injection. The attack is possible to be...

13. CVE-2025-9792 itsourcecode Apartment Management System e_all_info.php sql injection

    Published 2025-09-01

    Medium·CVSS 6.9 EPSS 0.43%

    A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /e_dashboard/e_all_info.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The e...

14. CVE-2025-9768 itsourcecode Sports Management System mode.php sql injection

    Published 2025-09-01

    Medium·CVSS 5.3 EPSS 0.46%

    A vulnerability was identified in itsourcecode Sports Management System 1.0. This impacts an unknown function of the file /Admin/mode.php. The manipulation of the argument code leads to sql injection. The attack is possible to be carried out remotely.

15. CVE-2025-9767 itsourcecode Sports Management System sporttype.php sql injection

    Published 2025-09-01

    Medium·CVSS 6.9 EPSS 0.55%

    A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been publicl...

16. CVE-2025-9766 itsourcecode Sports Management System facilitator.php sql injection

    Published 2025-09-01

    Medium·CVSS 6.9 EPSS 0.62%

    A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/facilitator.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploi...

17. CVE-2025-9765 itsourcecode Sports Management System tournament_details.php sql injection

    Published 2025-09-01

    Medium·CVSS 6.9 EPSS 0.44%

    A vulnerability has been found in itsourcecode Sports Management System 1.0. The affected element is an unknown function of the file /Admin/tournament_details.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

18. CVE-2025-9764 itsourcecode Sports Management System resultdetails.php sql injection

    Published 2025-09-01

    Medium·CVSS 6.9 EPSS 0.44%

    A flaw has been found in itsourcecode Sports Management System 1.0. Impacted is an unknown function of the file /Admin/resultdetails.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be use...

19. CVE-2025-9730 itsourcecode Apartment Management System updateProfile.php sql injection

    Published 2025-08-31

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /ajax/updateProfile.php. The manipulation of the argument user_id results in sql injection. It is possible to launch the attack remotely. The exploit...

20. CVE-2025-9679 itsourcecode Student Information System course_edit1.php sql injection

    Published 2025-08-30

    Medium·CVSS 6.9 EPSS 0.43%

    A security vulnerability has been detected in itsourcecode Student Information System 1.0. This affects an unknown function of the file /course_edit1.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

21. CVE-2025-9645 itsourcecode Apartment Management System r_all_info.php sql injection

    Published 2025-08-29

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was identified in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /t_dashboard/r_all_info.php. The manipulation of the argument mid leads to sql injection. The attack can be initiated remotely. The exploit is publicly availab...

22. CVE-2025-9644 itsourcecode Apartment Management System bill_setup.php sql injection

    Published 2025-08-29

    Medium·CVSS 6.9 EPSS 0.42%

    A vulnerability was determined in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/bill_setup.php. Executing manipulation of the argument txtBillType can lead to sql injection. It is possible to launch the att...

23. CVE-2025-9643 itsourcecode Apartment Management System utility_bill_setup.php sql injection

    Published 2025-08-29

    Medium·CVSS 6.9 EPSS 0.43%

    A vulnerability was found in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/utility_bill_setup.php. Performing manipulation of the argument txtGasBill results in sql injection. It is possible to initia...

24. CVE-2025-9601 itsourcecode Apartment Management System employee_salary_setup.php sql injection

    Published 2025-08-29

    Medium·CVSS 6.9 EPSS 0.44%

    A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotely. The exploit is now...

25. CVE-2025-9600 itsourcecode Apartment Management System member_type_setup.php sql injection

    Published 2025-08-29

    Medium·CVSS 6.9 EPSS 0.44%

    A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be in...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.