Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 573 to 598, most at risk first.

  1. itsourcecode Baptism Information Management System pbaptism.php sql injectionCVE-2026-108927itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  2. itsourcecode Online Admission System Project confirm.php sql injectionCVE-2026-104606itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  3. itsourcecode Leave Management System controller.php sql injectionCVE-2026-103690itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  4. itsourcecode Fees Management System ajax.php sql injectionCVE-2026-10296itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  5. itsourcecode Content Management System instructions.php sql injectionCVE-2026-10242itsourcecode · CVSS 6.3 · 0.3% likely

    CWE-89

  6. itsourcecode Baptism Information Management System ebaptism.php sql injectionCVE-2026-108926itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  7. itsourcecode College Management System courses.php sql injectionCVE-2026-4238itsourcecode · CVSS 4.7 · 0.2% likely

    CWE-89

  8. itsourcecode College Management System time-table.php sql injectionCVE-2026-4241itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  9. itsourcecode Online Cake Ordering System inserttrans.php sql injectionCVE-2026-114380itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  10. itsourcecode Sales-and-Inventory-System cust_edit.php sql injectionCVE-2026-114250itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  11. itsourcecode Construction Management System Parameter borrowed_equip_report.php sql injectionCVE-2026-5620itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  12. itsourcecode Courier Management System edit_user.php sql injectionCVE-2026-7612itsourcecode · CVSS 4.7 · 0.2% likely

    CWE-89

  13. itsourcecode Free Hotel Reservation System index.php sql injectionCVE-2026-4876itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  14. itsourcecode College Management System Parameter add-single-student-results.php sql injectionCVE-2026-4783itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  15. itsourcecode sanitize or validate this input Parameter subjects.php sql injectionCVE-2026-4614itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  16. itsourcecode Content Management System edit_topic.php sql injectionCVE-2026-10265itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  17. itsourcecode Construction Management System equipments.php sql injectionCVE-2026-6191itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  18. itsourcecode Construction Management System employees.php sql injectionCVE-2026-6190itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  19. itsourcecode Construction Management System del.php sql injectionCVE-2026-6007itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  20. itsourcecode Construction Management System borrowed_tool_report.php sql injectionCVE-2026-5823itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  21. itsourcecode sanitize or validate this input Parameter borrowedequip.php sql injectionCVE-2026-5681itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  22. itsourcecode Construction Management System Parameter borrowed_tool.php sql injectionCVE-2026-5675itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  23. itsourcecode Construction Management System Parameter borrowed_equip.php sql injectionCVE-2026-5660itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  24. itsourcecode Airline Reservation System manage_booked.php sql injectionCVE-2026-122191itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  25. itsourcecode Online Cake Ordering System deletetransac.php sql injectionCVE-2026-116101itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

  26. itsourcecode Hospital Management System addpatient.php sql injectionCVE-2026-11514itsourcecode · CVSS 6.3 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.