itsourcecode vulnerabilities
We track 505 vulnerabilities in itsourcecode products across 60+ products. 505 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest itsourcecode vulnerabilities
- 9.8 Critical severity
Airline Reservation System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been rated as critical. Affected by this issue is the function save_settings of the file admin/admin_class.php. The manipulation of the argument img leads to unrestricted upload.
- 9.8 Critical severity
Airline Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file flights.php. The manipulation of the argument departure_airport_id leads to sql i
- 9.8 Critical severity
Airline Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads
- 8.8 High severity
Airline Reservation System: External Control of File Name or Path
A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument page leads to file inclusion. The attack may be initi
- 8.8 High severity
Airline Reservation System: External Control of File Name or Path
A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument page leads to file inclusion. The attack can be initiated
- 9.8 Critical severity
Laravel Accounting System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manipulation of the argument image leads to unrestricted upload. I
- 9.8 Critical severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file partedit.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the atta
- 9.8 Critical severity
Placement Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Placement Management System 1.0. It has been classified as critical. This affects an unknown part of the file view_company.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the
- 9.8 Critical severity
Placement Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file apply_now.php. The manipulation of the argument id leads to sql injection. The attack may be
- 8.8 High severity
Placement Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resume_upload.php of the component Image Handler. The manipulation of the argumen
- 9.8 Critical severity
Placement Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the att
- 7.2 High severity
Ticket Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in itsourcecode Ticket Reservation System 1.0. This affects an unknown part of the file list_tickets.php. The manipulation of the argument prefSeat_id leads to sql injection. It is possible to initia
- 7.2 High severity
Ticket Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file checkout_ticket_save.php. The manipulation of the argument data leads to sql injec
- 9.8 Critical severity
Ticket Reservation System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Login Page. The manipulation of the argument username leads to sql
- 9.8 Critical severity
Online Blood Bank Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection.
- 7.2 High severity
Alton Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_save.php. The manipulation of the argument team leads to sql injection. It is possible to initiate t
- 7.2 High severity
Alton Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unre
- 7.2 High severity
Alton Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/member_save.php. The manipulation of the argument last/first leads to sql injec
- 7.2 High severity
Alton Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/category_save.php. The manipulation of the argument category leads to sql injection. It is possible to
- 7.2 High severity
Alton Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of the file /reservation_status.php. The manipulation of the argument rcode leads to sql injection. The at
- 9.8 Critical severity
Alton Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects unknown code of the file search.php. The manipulation of the argument rcode leads to sql injection. The attack can be initiated remotely. T
- 9.8 Critical severity
Society Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/check_admin.php. The manipulation of the argument username leads to sql injection. It is possible to
- 8.8 High severity
Society Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Society Management System 1.0 and classified as critical. This issue affects some unknown processing of the file check_student.php. The manipulation of the argument student_id leads to sql injection. The attack may be
- 8.8 High severity
Society Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability, which was classified as critical, was found in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/student.php. The manipulation of the argument image leads to unrestricted upload. It is possible to init
- 9.8 Critical severity
Society Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/get_balance.php. The manipulation of the argument student_id leads to sql i
- 9.8 Critical severity
Society Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in itsourcecode Society Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/get_price.php. The manipulation of the argument expenses_id leads to sql injection. Th
- 9.8 Critical severity
Online Food Ordering System: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in itsourcecode Online Food Ordering System 1.0. Affected is an unknown function of the file editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch th
- 9.8 Critical severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file expcatadd.php. The manipulation of the argument id/title leads to sql injection. The atta
- 9.8 Critical severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file /staffcatadd.php. The manipulation of the argument title leads to sql injection. It is possible to launch the att
- 9.8 Critical severity
Online Blood Bank Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php of the component Login. The manipulation of the argument user/pass leads to
- 8.8 High severity
University Management System: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical was found in itsourcecode University Management System 1.0. This vulnerability affects unknown code of the file /st_update.php of the component Avatar File Handler. The manipulation of the argument personal_image leads to
- 9.8 Critical severity
University Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in itsourcecode University Management System 1.0. This affects an unknown part of the file functions.php of the component Login. The manipulation of the argument username leads to sql injection. It is possi
- 7.2 High severity
University Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode University Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view_cgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attac
- 9.8 Critical severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sms.php. The manipulation of the argument customer leads to sql injection. The attack may be initiated
- 8.8 High severity
University Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode University Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view_single_result.php?vr=123321&vn=mirage. The manipulation of the argument seme leads to sql inje
- 9.8 Critical severity
Simple Task List: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the function insertUserRecord of the file signUp.php. The manipulation of the argument username leads to sql injection. It is possible to initiate
- 9.8 Critical severity
Document Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Document Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert.php. The manipulation of the argument anothercont leads to sql injection. Th
- 8.8 High severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file setgeneral.php. The manipulation of the argument sitename/email/mobile/sms/currency leads to sql in
- 8.8 High severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file templateadd.php. The manipulation of the argument title/msg leads to sql injection. It is possible to initia
- 8.8 High severity
Tailoring Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file templateedit.php. The manipulation of the argument id/title/msg leads to sql injection. The a