itsourcecode vulnerabilities
We track 505 vulnerabilities in itsourcecode products across 60+ products. 505 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
Latest itsourcecode vulnerabilities
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /update_program.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carrie
- 9.8 Critical severity
Online Pet Shop Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in itsourcecode Online Pet Shop Management System 1.0. This affects an unknown part of the file /pet1/available.php. Such manipulation of the argument Name leads to sql injection. The attack can be executed remotely. The exploit
- 9.8 Critical severity
COVID Tracking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. Th
- 9.8 Critical severity
COVID Tracking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. The attack may be initiated r
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /update_account.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in itsourcecode Student Management System 1.0. This affects an unknown part of the file /new_grade.php. This manipulation of the argument grade causes sql injection. The attack can be initiated remotely. The exploit has been publ
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in itsourcecode Student Management System 1.0. Affected by this issue is some unknown functionality of the file /promote.php. The manipulation of the argument sy results in sql injection. It is possible to launch the attack remotely.
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /new_school_year.php. The manipulation of the argument sy leads to sql injection. It is possible to initiate th
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /new_adviser.php. Executing manipulation of the argument Name can lead to sql injection. The attack may be performed from remote. The exploit has b
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /newsubject.php. The manipulation of the argument sub leads to sql injection. The attack may be initiated remot
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /newrecord.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been publ
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /newcurriculm.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit i
- 9.8 Critical severity
Student Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in itsourcecode Student Management System 1.0. This vulnerability affects unknown code of the file /edit_user.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely.
- 8.8 High severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /section_edit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit h
- 9.8 Critical severity
COVID Tracking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument code results in sql injection. The attack may be performed from remote. The exploit is n
- 8.8 High severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /schedule_edit1.php. Such manipulation of the argument schedule_id leads to sql injection. The attack may be l
- 8.8 High severity
COVID Tracking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state. Performing manipulation of the argument ID results in sql injection. The attack may be initiated rem
- 8.8 High severity
COVID Tracking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disc
- 8.8 High severity
COVID Tracking System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?page=people. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published a
- 8.8 High severity
COVID Tracking System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exp
- 9.8 Critical severity
Online File Management System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched
- 9.8 Critical severity
Human Resource Management System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be laun
- 9.8 Critical severity
Human Resource Management System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventStore.php. This manipulation of the argument eventSubject causes sql injection. The attack can be initia
- 8.8 High severity
Student Information System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. Executing manipulation of the argument en_id can lead to sql injection. The attack may be performed fr
- 9.8 Critical severity
Web-Based Internet Laboratory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /subject/controller.php. The manipulation results in sql injection. It is possible to launch t
- 9.8 Critical severity
Web-Based Internet Laboratory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. Affected is an unknown function of the file /settings/controller.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. T
- 9.8 Critical severity
Web-Based Internet Laboratory Management System: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing a manipulation can lead to sql injection. The attack may be performed from remote. The explo
- 9.8 Critical severity
Web-Based Internet Laboratory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. This affects an unknown function of the file /enrollment/controller.php. Performing a manipulation results in sql injection. The attack is possible to be carried
- 9.8 Critical severity
Web-Based Internet Laboratory Management System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Web-Based Internet Laboratory Management System 1.0. The impacted element is an unknown function of the file /course/controller.php. Such manipulation leads to sql injection. The attack can be executed
- 8.8 High severity
Online Voting System: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely.
- 8.8 High severity
Online Voting System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_user. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the at
- 9.8 Critical severity
Online Voting System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is
- 9.8 Critical severity
Inventory Management System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /admin/user/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be i
- 9.8 Critical severity
Inventory Management System: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Inventory Management System 1.0. Affected is an unknown function of the file /LogSignModal.PHP. The manipulation of the argument U_USERNAME results in sql injection. The attack can be launched remotely. The e
- 9.8 Critical severity
Inventory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely.
- 9.8 Critical severity
Inventory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in itsourcecode Inventory Management System 1.0. This affects an unknown function of the file /admin/login.php. Executing manipulation of the argument user_email can lead to sql injection. It is possible to launch the attack remo
- 9.8 Critical severity
Inventory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the atta
- 9.8 Critical severity
Inventory Management System: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in itsourcecode Inventory Management System 1.0. The affected element is an unknown function of the file /index.php?q=single-item. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remo
- 9.8 Critical severity
Inventory Management System: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be pe
- 8.8 High severity
Online Voting System: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The ex