Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 313 to 338, most at risk first.

itsourcecode Online Pet Shop Management System available.php sql injectionCVE-2025-14587itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode COVID Tracking System Admin Login login.php sql injectionCVE-2025-14584itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Management System update_account.php sql injectionCVE-2025-14578itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Management System new_grade.php sql injectionCVE-2025-14337itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Management System promote.php sql injectionCVE-2025-14336itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Management System new_school_year.php sql injectionCVE-2025-14335itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Management System new_adviser.php sql injectionCVE-2025-14334itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Management System newsubject.php sql injectionCVE-2025-14258itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Management System edit_user.php sql injectionCVE-2025-14226itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode COVID Tracking System login.php sql injectionCVE-2025-13585itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Human Resource Management System NoticeStore.php sql injectionCVE-2025-13421itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Human Resource Management System EventStore.php sql injectionCVE-2025-13420itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionCVE-2025-13301itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionCVE-2025-13300itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionCVE-2025-13299itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionCVE-2025-13297itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Inventory Management System index.php sql injectionCVE-2025-13257itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Inventory Management System login.php sql injectionCVE-2025-13235itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Inventory Management System index.php sql injectionCVE-2025-13233itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Student Transcript Processing System login.php sql injectionCVE-2025-11434itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile.php sql injectionCVE-2025-10670itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Apartment Management System bill_setup.php sql injectionCVE-2025-9644itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Inventory Management System LogSignModal.PHP sql injectionCVE-2025-13237itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Online Loan Management System manage_borrower.php sql injectionCVE-2025-12606itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Online Loan Management System manage_loan.php sql injectionCVE-2025-12605itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89
itsourcecode Online Loan Management System load_fields.php sql injectionCVE-2025-12604itsourcecode · CVSS 7.3 · 0.4% likely
CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.