Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 287 to 312, most at risk first.

  1. itsourcecode Payroll System admin_class.php login sql injectionCVE-2026-78201itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  2. itsourcecode Sales and Inventory System processlogin.php sql injectionCVE-2026-78171itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  3. itsourcecode Cafe Reservation System Registration signup.php sql injectionCVE-2026-4014itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  4. itsourcecode Online Doctor Appointment System doctor_action.php sql injectionCVE-2026-3981itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  5. itsourcecode Online Doctor Appointment System patient_action.php sql injectionCVE-2026-3980itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  6. itsourcecode News Portal Project contactus.php sql injectionCVE-2026-3164itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  7. itsourcecode College Management System teacher-salary.php sql injectionCVE-2026-3152itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  8. itsourcecode Online Hotel Management System login.php sql injectionCVE-2026-14688itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  9. itsourcecode Online Hotel Management System controller.php add sql injectionCVE-2026-13555itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  10. itsourcecode Online Hotel Management System controller.php edit sql injectionCVE-2026-13552itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  11. itsourcecode Baptism Information Management System editBaptism.php sql injectionCVE-2026-13551itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  12. itsourcecode Baptism Information Management System delbaptism.php sql injectionCVE-2026-13550itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  13. itsourcecode Baptism Information Management System listbaptism.php sql injectionCVE-2025-10405itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  14. itsourcecode University Management System view_result.php sql injectionCVE-2026-3760itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  15. itsourcecode Directory Management System forget-password.php sql injectionCVE-2026-2161itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  16. itsourcecode School Management System index.php sql injectionCVE-2026-1545itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  17. itsourcecode Tailoring Management System staffcatadd.php sql injectionCVE-2024-6970itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  18. itsourcecode School Management System controller.php sql injectionCVE-2026-2190itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  19. itsourcecode School Management System index.php sql injectionCVE-2026-2189itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  20. itsourcecode Society Management System edit_expenses.php sql injectionCVE-2026-2116itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  21. itsourcecode Society Management System edit_admin.php sql injectionCVE-2026-2114itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  22. itsourcecode Student Management System student_p.php sql injectionCVE-2025-15075itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  23. itsourcecode Online Frozen Foods Ordering System contact_us.php sql injectionCVE-2025-15073itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  24. itsourcecode Society Management System delete_activity.php sql injectionCVE-2026-1119itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  25. itsourcecode Online Pet Shop Management System addcnp.php sql injectionCVE-2025-14637itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  26. itsourcecode Student Management System update_program.php sql injectionCVE-2025-14588itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.