Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 547 to 572, most at risk first.

  1. itsourcecode Online Admission System login1.php sql injectionCVE-2026-105172itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  2. itsourcecode Online House Rental System manage_payment.php sql injectionCVE-2026-10253itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  3. itsourcecode Online House Rental System manage_tenant.php sql injectionCVE-2026-10252itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  4. itsourcecode Online House Rental System ajax.php login sql injectionCVE-2026-10251itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  5. itsourcecode Online Blood Bank Management System campsdetails.php sql injectionCVE-2026-10250itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  6. itsourcecode Online Cake Ordering System deleteproduct.php sql injectionCVE-2026-114378itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  7. itsourcecode Student Transcript Processing System index.php sql injectionCVE-2026-9575itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  8. itsourcecode Student Transcript Processing System trans.php sql injectionCVE-2026-9574itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  9. itsourcecode Student Transcript Processing System index.php sql injectionCVE-2026-9573itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  10. itsourcecode Courier Management System edit_staff.php sql injectionCVE-2026-7592itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  11. itsourcecode Electronic Judging System login.php sql injectionCVE-2026-7555itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  12. itsourcecode Online Cellphone System Parameter available.php sql injectionCVE-2026-5553itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  13. itsourcecode College Management System search_student.php sql injectionCVE-2026-4485itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  14. itsourcecode Courier Management System manage_user.php sql injectionCVE-2026-9606itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  15. itsourcecode Electronic Judging System login.php sql injectionCVE-2026-9383itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  16. itsourcecode Courier Management System edit_parcel.php sql injectionCVE-2026-7077itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  17. itsourcecode Courier Management System edit_branch.php sql injectionCVE-2026-7076itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  18. itsourcecode Construction Management System locations.php sql injectionCVE-2026-7075itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  19. itsourcecode Construction Management System execute1.php sql injectionCVE-2026-7074itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  20. itsourcecode Construction Management System execute.php sql injectionCVE-2026-7073itsourcecode · CVSS 7.3 · 0.3% likely

    CWE-89

  21. itsourcecode Sales-and-Inventory-System cust_del.php sql injectionCVE-2026-114251itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  22. itsourcecode Online Cake Ordering System deletecustomer.php sql injectionCVE-2026-113740itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  23. itsourcecode Construction Management System borrowedtool.php sql injectionCVE-2026-5719itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  24. itsourcecode Online Book Store book.php sql injectionCVE-2026-116515itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  25. itsourcecode Online Cake Ordering System confirm.php sql injectionCVE-2026-112087itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  26. itsourcecode Online Admission System sum.php sql injectionCVE-2026-108928itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.