Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 339 to 364, most at risk first.

  1. itsourcecode Online Loan Management System manage_payment.php sql injectionCVE-2025-12607itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  2. Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payroll_items.php via the ID parameter.CVE-2024-37831Itsourcecode · CVSS 9.1 · 0.4% likely

    CWE-89

  3. itsourcecode Insurance Management System insertAgent.php sql injectionCVE-2025-7212itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  4. itsourcecode Free Hotel Reservation System index.php sql injectionCVE-2026-3730itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  5. itsourcecode Employee Management System editempprofile.php sql injectionCVE-2025-6610itsourcecode · CVSS 4.7 · 0.4% likely

    CWE-89

  6. itsourcecode Online File Management System ajax.php sql injectionCVE-2025-13485itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  7. itsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injectionCVE-2026-4471itsourcecode · CVSS 4.7 · 0.4% likely

    CWE-89

  8. itsourcecode School Management System controller.php sql injectionCVE-2026-1551itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  9. itsourcecode Online Cake Ordering System product.php sql injectionCVE-2025-14650itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  10. itsourcecode Online Frozen Foods Ordering System order_online.php sql injectionCVE-2026-1159itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  11. itsourcecode College Management System class-result.php sql injectionCVE-2026-3487itsourcecode · CVSS 4.7 · 0.4% likely

    CWE-89

  12. itsourcecode University Management System add_result.php sql injectionCVE-2026-3747itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  13. itsourcecode Open Source Job Portal index.php sql injectionCVE-2025-11054itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  14. itsourcecode Online Clinic Management System editp2.php sql injectionCVE-2025-10620itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  15. itsourcecode Online Public Access Catalog OPAC POST Parameter mysearch.php sql injectionCVE-2025-10592itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  16. itsourcecode School Management System controller.php sql injectionCVE-2026-2018itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  17. itsourcecode Student Management System index.php sql injectionCVE-2026-2012itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  18. itsourcecode Student Management System controller.php sql injectionCVE-2026-2011itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  19. itsourcecode Directory Management System index.php sql injectionCVE-2026-1688itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  20. itsourcecode Society Management System edit_student_query.php sql injectionCVE-2026-1595itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  21. itsourcecode School Management System index.php sql injectionCVE-2026-1176itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  22. itsourcecode School Management System index.php sql injectionCVE-2026-0544itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  23. itsourcecode Society Management System add_admin.php sql injectionCVE-2025-15354itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  24. itsourcecode Society Management System edit_admin_query.php edit_admin_query sql injectionCVE-2025-15353itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  25. itsourcecode Student Management System record.php sql injectionCVE-2025-15034itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  26. itsourcecode Student Management System candidates_report.php sql injectionCVE-2025-14967itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.