Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 391 to 416, most at risk first.

  1. itsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injectionCVE-2026-2865itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  2. itsourcecode Online Cake Ordering System detailtransac.php sql injectionCVE-2025-15167itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  3. itsourcecode Online Cake Ordering System updatesupplier.php sql injectionCVE-2025-15166itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  4. itsourcecode Online Cake Ordering System updatecustomer.php sql injectionCVE-2025-15165itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  5. itsourcecode Inventory Management System index.php sql injectionCVE-2025-13210itsourcecode · CVSS 4.7 · 0.4% likely

    CWE-89

  6. itsourcecode University Management System att_single_view.php sql injectionCVE-2026-3765itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  7. itsourcecode University Management System admin_search_student.php sql injectionCVE-2026-3740itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  8. itsourcecode Sports Management System gametype.php sql injectionCVE-2025-9840itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  9. itsourcecode Student Information System section_edit1.php sql injectionCVE-2025-14214itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  10. itsourcecode Online Voting System index.php sql injectionCVE-2025-13287itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  11. itsourcecode College Management System student-fee.php sql injectionCVE-2026-3486itsourcecode · CVSS 4.7 · 0.4% likely

    CWE-89

  12. itsourcecode Online Book Store admin_edit.php sql injectionCVE-2026-123028itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  13. itsourcecode Vehicle Management System billaction.php sql injectionCVE-2026-2867itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  14. itsourcecode Open Source Job Portal index.php sql injectionCVE-2025-11088itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  15. itsourcecode News Portal Project aboutus.php sql injectionCVE-2026-2162itsourcecode · CVSS 4.7 · 0.4% likely

    CWE-89

  16. itsourcecode Society Management System add_activity.php sql injectionCVE-2026-1118itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  17. itsourcecode Inventory Management System index.php sql injectionCVE-2025-13236itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  18. itsourcecode Inventory Management System index.php sql injectionCVE-2025-13234itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

  19. itsourcecode Hospital Management System adminprofile.php sql injectionCVE-2026-13495itsourcecode · CVSS 4.7 · 0.3% likely

    CWE-89

  20. itsourcecode Online Clinic Management System details.php sql injectionCVE-2025-11038itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  21. itsourcecode Open Source Job Portal index.php sql injectionCVE-2025-11090itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  22. itsourcecode Open Source Job Portal index.php sql injectionCVE-2025-11041itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  23. itsourcecode Student Information System leveledit1.php sql injectionCVE-2025-10613itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  24. itsourcecode Online Doctor Appointment System appointment_action.php sql injectionCVE-2026-4473itsourcecode · CVSS 4.7 · 0.3% likely

    CWE-89

  25. itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injectionCVE-2026-4470itsourcecode · CVSS 4.7 · 0.3% likely

    CWE-89

  26. itsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injectionCVE-2026-4469itsourcecode · CVSS 4.7 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.