Skip to content

Vendor

itsourcecode vulnerabilities

716 published CVES affecting itsourcecode, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
716
Critical
9
High
11
Medium
696
Low
0
Unscored
0
CISA KEV
0
Atom feed of itsourcecode alerts

Products

Latest itsourcecode CVEs

Newest publication first · page 3 of 29

  1. MediumCVSS 5.3 EPSS 0.33%

    A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/us_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disc...

  2. MediumCVSS 5.3 EPSS 0.33%

    A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/us_del.php?type=user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the atta...

  3. MediumCVSS 5.3 EPSS 0.33%

    A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_del.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be perform...

  4. MediumCVSS 5.3 EPSS 0.33%

    A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly a...

  5. MediumCVSS 5.3 EPSS 0.33%

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_del.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been publi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.