Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 417 to 442, most at risk first.

  1. itsourcecode Online Enrollment System Parameter index.php sql injectionCVE-2026-4842itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  2. itsourcecode Student Information System schedule_edit1.php sql injectionCVE-2025-13581itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  3. itsourcecode COVID Tracking System page sql injectionCVE-2025-13570itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  4. itsourcecode COVID Tracking System page sql injectionCVE-2025-13569itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  5. itsourcecode COVID Tracking System page sql injectionCVE-2025-13568itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  6. itsourcecode COVID Tracking System page sql injectionCVE-2025-13567itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  7. itsourcecode Student Information System enrollment_edit1.php sql injectionCVE-2025-13325itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  8. itsourcecode Online Voting System ajax.php sql injectionCVE-2025-13286itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  9. itsourcecode Leave Management System index.php sql injectionCVE-2026-95833itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  10. itsourcecode Leave Management System index.php sql injectionCVE-2026-94032itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  11. itsourcecode Leave Management System controller.php sql injectionCVE-2026-93963itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  12. itsourcecode Leave Management System index.php sql injectionCVE-2026-92526itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  13. itsourcecode Leave Management System index.php sql injectionCVE-2026-92364itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  14. itsourcecode Leave Management System index.php sql injectionCVE-2026-90796itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  15. itsourcecode Sales and Inventory System pro_edit1.php sql injectionCVE-2026-90700itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  16. itsourcecode Sales and Inventory System inv_edit1.php sql injectionCVE-2026-90600itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  17. itsourcecode Sales and Inventory System sup_edit1.php sql injectionCVE-2026-90597itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  18. itsourcecode Sales and Inventory System emp_transac.php add sql injectionCVE-2026-90574itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  19. itsourcecode Sales and Inventory System cust_pos_trans.php sql injectionCVE-2026-90525itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  20. itsourcecode Sales and Inventory System us_edit.php sql injectionCVE-2026-86675itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  21. itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injectionCVE-2026-86517itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  22. itsourcecode Sales and Inventory System cust_edit1.php sql injectionCVE-2026-86310itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  23. itsourcecode Sales and Inventory System pro_searchfrm.php sql injectionCVE-2026-86309itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  24. itsourcecode Sales and Inventory System us_edit1.php sql injectionCVE-2026-86291itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  25. itsourcecode Sales and Inventory System settings_edit.php sql injectionCVE-2026-86270itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  26. itsourcecode Sales and Inventory System emp_edit1.php sql injectionCVE-2026-86269itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.