itsourcecode vulnerabilities
We track 505 vulnerabilities in itsourcecode products across 60+ products. 505 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest itsourcecode vulnerabilities
- 9.8 Critical severity
Online Bookstore: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file bookPerPub.php. The manipulation of the argument pubid leads to sql injection. The attack c
- 9.8 Critical severity
Online House Rental System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the
- 9.8 Critical severity
billing_system: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in itsourcecode Billing System 1.0 allows a local attacker to execute arbitrary code in process.php via the username parameter.
- 9.8 Critical severity
Payroll Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file print_payroll.php. The manipulation of the argument id leads to sql injection. The attack may b
- 9.8 Critical severity
Bakery Online Ordering System: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/modules/product/controller.php?action=add. The manipulation of the argument image leads to unres
- 8.8 High severity
Online Discussion Forum: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. Affected is an unknown function of the file /members/poster.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch th
- 9.8 Critical severity
Online Discussion Forum: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Discussion Forum 1.0. It has been rated as critical. This issue affects some unknown processing of the file register_me.php. The manipulation of the argument eaddress leads to sql injection. The attack may be in
- 9.8 Critical severity
Bakery Online Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The
- 9.8 Critical severity
Bakery Online Ordering System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection.
- 8.8 High severity
Learning Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injectio
- 9.8 Critical severity
Learning Management System Project In PHP: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in ItsourceCode Learning Management System Project In PHP 1.0. This vulnerability affects unknown code of the file login.php. The manipulation of the argument user_email leads to sql injection. The attack can be
- 8.8 High severity
Online Discussion Forum: Unrestricted Upload of File with Dangerous Type
A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file change_profile_picture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initi
- 9.8 Critical severity
Online Blood Bank Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file changepwd.php. The manipulation of the argument useremail leads to sql injection.
- 9.8 Critical severity
Online Blood Bank Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file massage.php. The manipulation of the argument bid leads to sql injection
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file instructorSubjects.php. The manipulation of the argument instructorId leads to sql inj
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfaculty.php. The manipulation of the argument name leads to sql injection. It is possible to launch the a
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file listofinstructor.php. The manipulation of the argument FullName leads to sql injection. The at
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file newDept.php. The manipulation of the argument deptname leads to sql injection. The attack can
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file listofcourse.php. The manipulation of the argument idno leads to sql injection. It is possible to initi
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file editSubject.php. The manipulation of the argument id leads to sql injection. The attack
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql inj
- 8.8 High severity
Online Student Enrollment System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file listofstudent.php. The manipulation of the argument lname leads to sql injection. It is possible to l
- 8.8 High severity
Student Information Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The
- 9.8 Critical severity
News Portal: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of the argument searchtitle leads to sql injection. The attack may
- 9.8 Critical severity
Online-Book-Store-Website: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The att