Skip to content

Itsourcecode · weakness class

File and Path Handling

35 CVEs

Out of date: the sync last ran 4 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 35 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. itsourcecode Online Food Ordering System addproduct.php unrestricted uploadCVE-2024-6373itsourcecode · CVSS 7.3 · 0.9% likely

    CWE-434

  2. itsourcecode Pool of Bethesda Online Reservation System uploadImage unrestricted uploadCVE-2024-6084itsourcecode · CVSS 7.3 · 0.9% likely

    CWE-434

  3. itsourcecode Bakery Online Ordering System unrestricted uploadCVE-2024-5745itsourcecode · CVSS 7.3 · 0.9% likely

    CWE-434

  4. itsourcecode Simple Online Hotel Reservation System edit_room.php unrestricted uploadCVE-2024-6116itsourcecode · CVSS 7.3 · 0.8% likely

    CWE-434

  5. itsourcecode Simple Online Hotel Reservation System add_room.php unrestricted uploadCVE-2024-6115itsourcecode · CVSS 7.3 · 0.8% likely

    CWE-434

  6. itsourcecode Magbanua Beach Resort Online Reservation System controller.php unrestricted uploadCVE-2024-6110itsourcecode · CVSS 7.3 · 0.8% likely

    CWE-434

  7. itsourcecode Monbela Tourist Inn Online Reservation System controller.php unrestricted uploadCVE-2024-6114itsourcecode · CVSS 7.3 · 0.8% likely

    CWE-434

  8. itsourcecode Online Discussion Forum change_profile_picture.php unrestricted uploadCVE-2024-5518itsourcecode · CVSS 6.3 · 0.8% likely

    CWE-434

  9. itsourcecode Farm Management System add-pig.php unrestricted uploadCVE-2025-0582itsourcecode · CVSS 4.7 · 0.7% likely

    CWE-434

  10. itsourcecode Laravel Property Management System PropertiesController.php upload unrestricted uploadCVE-2024-7943itsourcecode · CVSS 6.3 · 0.7% likely

    CWE-434

  11. itsourcecode Tailoring Management System setlogo.php unrestricted uploadCVE-2024-7506itsourcecode · CVSS 6.3 · 0.7% likely

    CWE-434

  12. itsourcecode Airline Reservation System admin_class.php save_settings unrestricted uploadCVE-2024-7500itsourcecode · CVSS 6.3 · 0.7% likely

    CWE-434

  13. itsourcecode Airline Reservation System index.php file inclusionCVE-2024-7497itsourcecode · CVSS 6.3 · 0.7% likely

    CWE-73

  14. itsourcecode Airline Reservation System index.php file inclusionCVE-2024-7496itsourcecode · CVSS 6.3 · 0.7% likely

    CWE-73

  15. itsourcecode University Management System Avatar File st_update.php unrestricted uploadCVE-2024-6958itsourcecode · CVSS 6.3 · 0.6% likely

    CWE-434

  16. itsourcecode Online Food Ordering System editproduct.php unrestricted uploadCVE-2024-7189itsourcecode · CVSS 6.3 · 0.6% likely

    CWE-434

  17. itsourcecode Placement Management System Image resume_upload.php unrestricted uploadCVE-2024-7450itsourcecode · CVSS 6.3 · 0.6% likely

    CWE-434

  18. itsourcecode Society Management System student.php unrestricted uploadCVE-2024-7192itsourcecode · CVSS 6.3 · 0.6% likely

    CWE-434

  19. itsourcecode Online Discussion Forum poster.php unrestricted uploadCVE-2024-5734itsourcecode · CVSS 6.3 · 0.6% likely

    CWE-434

  20. itsourcecode Laravel Accounting System HomeController.php unrestricted uploadCVE-2024-7495itsourcecode · CVSS 6.3 · 0.6% likely

    CWE-434

  21. itsourcecode Alton Management System Add a Menu menu.php unrestricted uploadCVE-2024-7277itsourcecode · CVSS 4.7 · 0.5% likely

    CWE-434

  22. itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted uploadCVE-2024-7944itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-434

  23. itsourcecode Online Bookstore admin_add.php unrestricted uploadCVE-2024-9036itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-434

  24. itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted uploadCVE-2026-85208itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-434

  25. itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted uploadCVE-2026-78245itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-434

  26. itsourcecode Payroll System admin_class.php save_settings unrestricted uploadCVE-2026-78202itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in