Skip to content

Vendor

itsourcecode vulnerabilities

716 published CVES affecting itsourcecode, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
716
Critical
9
High
11
Medium
696
Low
0
Unscored
0
CISA KEV
0
Atom feed of itsourcecode alerts

Products

Latest itsourcecode CVEs

Newest publication first · page 7 of 29

  1. MediumCVSS 5.3 EPSS 0.20%

    A security vulnerability has been detected in itsourcecode Fees Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /receipt.php. Such manipulation of the argument ef_id leads to sql injection. The attack may be performed from remote. The...

  2. MediumCVSS 5.3 EPSS 0.20%

    A security flaw has been discovered in itsourcecode Fees Management System 1.0. This impacts an unknown function of the file /manage_user.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the p...

  3. MediumCVSS 5.3 EPSS 0.20%

    A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the file /manage_fee.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published an...

  4. MediumCVSS 5.3 EPSS 0.27%

    A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of the file index.php. Performing a manipulation of the argument page results in cross site scripting. The attack may be initiated remotely. The exploit is now pub...

  5. MediumCVSS 5.3 EPSS 0.25%

    A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be performed from remote. The exploit...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.