Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 495 to 520, most at risk first.

  1. itsourcecode Hospital Management System payment.php sql injectionCVE-2026-14773itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  2. itsourcecode Hospital Management System patientreport.php sql injectionCVE-2026-14731itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  3. itsourcecode Hospital Management System patientprofile.php sql injectionCVE-2026-14730itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  4. itsourcecode Hospital Management System patientlogin.php sql injectionCVE-2026-14717itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  5. itsourcecode Hospital Management System patientorder.php sql injectionCVE-2026-14703itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  6. itsourcecode Hospital Management System patientappointment.php sql injectionCVE-2026-14659itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  7. itsourcecode Hospital Management System patient.php sql injectionCVE-2026-14638itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  8. itsourcecode Hospital Management System medicine.php sql injectionCVE-2026-14619itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  9. itsourcecode Hospital Management System patientchangepassword.php sql injectionCVE-2026-13579itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  10. itsourcecode Hospital Management System patientdetail.php sql injectionCVE-2026-13578itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  11. itsourcecode Hospital Management System insertbillingrecord.php sql injectionCVE-2026-13572itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  12. itsourcecode Hospital Management System doctortimings.php sql injectionCVE-2026-13548itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  13. itsourcecode Hospital Management System doctorprofile.php sql injectionCVE-2026-13542itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  14. itsourcecode Hospital Management System doctorchangepassword.php sql injectionCVE-2026-13541itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  15. itsourcecode Hospital Management System departmentDoctor.php sql injectionCVE-2026-13532itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  16. itsourcecode Hospital Management System department.php sql injectionCVE-2026-13531itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  17. itsourcecode Hospital Management System Appointment appointmentdetail.php sql injectionCVE-2026-13530itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  18. itsourcecode Hospital Management System Appointment appointmentapproval.php sql injectionCVE-2026-13520itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  19. itsourcecode Hospital Management System appointment.php sql injectionCVE-2026-13497itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  20. itsourcecode Hospital Management System ajaxmedicine.php sql injectionCVE-2026-13496itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  21. A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'subjcode' par…CVE-2026-36235Itsourcecode · CVSS 9.8 · 0.3% likely

    CWE-89

  22. itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.CVE-2026-36234Itsourcecode · CVSS 9.8 · 0.3% likely

    CWE-89

  23. A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that attackers…CVE-2026-36233Itsourcecode · CVSS 9.8 · 0.3% likely

    CWE-89

  24. A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0. The reason for this issue is that the 'classId' pa…CVE-2026-36232Itsourcecode · CVSS 9.8 · 0.3% likely

    CWE-89

  25. itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injectionCVE-2026-4472itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  26. itsourcecode Society Management System edit_activity_query.php sql injectionCVE-2026-0582itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.