Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 261 to 286, most at risk first.

  1. itsourcecode Apartment Management System visitor_info.php sql injectionCVE-2025-9507itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  2. itsourcecode Apartment Management System add_owner_utility.php sql injectionCVE-2025-9472itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  3. itsourcecode Online Tour and Travel Management System package.php sql injectionCVE-2025-9426itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  4. itsourcecode Online Tour and Travel Management System enquiry.php sql injectionCVE-2025-9425itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  5. itsourcecode Student Information Management System index.php sql injectionCVE-2025-10111itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  6. itsourcecode Open Source Job Portal login.php sql injectionCVE-2025-10834itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  7. itsourcecode Online Laundry Management System login.php sql injectionCVE-2025-10426itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  8. itsourcecode Online Discussion Forum compose_msg_admin.php sql injectionCVE-2025-10668itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  9. itsourcecode Apartment Management System Setting admin.php sql injectionCVE-2025-9793itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  10. itsourcecode Apartment Management System e_all_info.php sql injectionCVE-2025-9792itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  11. itsourcecode Apartment Management System r_all_info.php sql injectionCVE-2025-9645itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  12. itsourcecode Apartment Management System utility_bill_setup.php sql injectionCVE-2025-9643itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  13. itsourcecode University Management System admin_single_student.php sql injectionCVE-2026-3413itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  14. itsourcecode Document Management System Login loging.php sql injectionCVE-2026-3133itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  15. itsourcecode Apartment Management System updateProfile.php sql injectionCVE-2025-9730itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  16. itsourcecode Student Information System course_edit1.php sql injectionCVE-2025-9679itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  17. itsourcecode Open Source Job Portal index.php sql injectionCVE-2025-11101itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  18. itsourcecode Leave Management System login.php sql injectionCVE-2026-90789itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  19. itsourcecode School Management System User_Login.php sql injectionCVE-2026-86268itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  20. itsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injectionCVE-2026-85187itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  21. itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injectionCVE-2026-82615itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  22. itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injectionCVE-2026-82614itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  23. itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injectionCVE-2026-82613itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  24. itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injectionCVE-2026-82612itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  25. itsourcecode Online Clinic Management System Admin Login login.php sql injectionCVE-2026-78246itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  26. itsourcecode Real Estate Management System search.php sql injectionCVE-2026-78244itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.