Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 365 to 390, most at risk first.

  1. itsourcecode Online Cake Ordering System updateproduct.php sql injectionCVE-2025-14832itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  2. itsourcecode COVID Tracking System page sql injectionCVE-2025-14667itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  3. itsourcecode COVID Tracking System page sql injectionCVE-2025-14666itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  4. itsourcecode Student Managemen System advisers.php sql injectionCVE-2025-14661itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  5. itsourcecode Student Management System addrecord.php sql injectionCVE-2025-14653itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  6. itsourcecode Online Cake Ordering System admindetail.php sql injectionCVE-2025-14652itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  7. itsourcecode Online Cake Ordering System supplier.php sql injectionCVE-2025-14649itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  8. itsourcecode Student Management System update_subject.php sql injectionCVE-2025-14644itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  9. itsourcecode Student Management System uprec.php sql injectionCVE-2025-14639itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  10. itsourcecode Online Pet Shop Management System update_cnp.php sql injectionCVE-2025-14638itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  11. itsourcecode Online Enrollment System Parameter index.php sql injectionCVE-2026-5334itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  12. itsourcecode Event Management System manage_user.php sql injectionCVE-2026-2217itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  13. itsourcecode Society Management System edit_activity.php sql injectionCVE-2026-2117itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  14. itsourcecode Society Management System delete_expenses.php sql injectionCVE-2026-2115itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  15. itsourcecode School Management System index.php sql injectionCVE-2026-2073itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  16. itsourcecode Student Management System list_report.php sql injectionCVE-2025-15078itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  17. itsourcecode Student Management System form137.php sql injectionCVE-2025-15077itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  18. itsourcecode Student Management System statistical.php sql injectionCVE-2025-15168itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  19. itsourcecode University Management System admin_single_student_update.php sql injectionCVE-2026-3411itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  20. itsourcecode Society Management System check_studid.php sql injectionCVE-2026-3410itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  21. itsourcecode School Management System Setting index.php sql injectionCVE-2026-3261itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  22. itsourcecode News Portal Project add-category.php sql injectionCVE-2026-3135itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  23. itsourcecode News Portal Project edit-category.php sql injectionCVE-2026-3134itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  24. itsourcecode Document Management System edtlbls.php sql injectionCVE-2026-3069itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  25. itsourcecode Document Management System deluser.php sql injectionCVE-2026-3068itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  26. itsourcecode E-Logbook with Health Monitoring System for COVID-19 check_profile_old.php sql injectionCVE-2026-3046itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.