Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 183 to 208, most at risk first.

  1. itsourcecode Online Clinic Management System transact.php sql injectionCVE-2025-10618itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  2. itsourcecode School Management System index.php sql injectionCVE-2026-1701itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  3. itsourcecode Project Expense Monitoring System print.php sql injectionCVE-2024-7935itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  4. itsourcecode Project Expense Monitoring System execute.php sql injectionCVE-2024-7934itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  5. itsourcecode Apartment Management System addfair.php sql injectionCVE-2025-9311itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  6. itsourcecode Sports Management System sports.php sql injectionCVE-2025-9156itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  7. itsourcecode Online Tour and Travel Management System booking_report.php sql injectionCVE-2025-9010itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  8. itsourcecode Online Tour and Travel Management System email_setup.php sql injectionCVE-2025-9009itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  9. itsourcecode Online Tour and Travel Management System sms_setting.php sql injectionCVE-2025-9008itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  10. itsourcecode Online Tour and Travel Management System expense_report.php sql injectionCVE-2025-8993itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  11. itsourcecode Online Tour and Travel Management System expense_category.php sql injectionCVE-2025-8984itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  12. itsourcecode Online Tour and Travel Management System expense.php sql injectionCVE-2025-8983itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  13. itsourcecode Online Tour and Travel Management System currency.php sql injectionCVE-2025-8982itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  14. itsourcecode Online Tour and Travel Management System payment.php sql injectionCVE-2025-8981itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  15. itsourcecode Online Tour and Travel Management System page-login.php sql injectionCVE-2025-8972itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  16. itsourcecode Online Tour and Travel Management System travellers.php sql injectionCVE-2025-8971itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  17. itsourcecode Online Tour and Travel Management System booking.php sql injectionCVE-2025-8970itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  18. itsourcecode Online Tour and Travel Management System approve_user.php sql injectionCVE-2025-8969itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  19. itsourcecode Online Tour and Travel Management System disapprove_user.php sql injectionCVE-2025-8968itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  20. itsourcecode Online Tour and Travel Management System packages.php sql injectionCVE-2025-8967itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  21. itsourcecode Online Tour and Travel Management System tax.php sql injectionCVE-2025-8966itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  22. itsourcecode Leave Management System reset.php sql injectionCVE-2025-11432itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  23. itsourcecode Online Discussion Forum index.php sql injectionCVE-2025-10800itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  24. itsourcecode Web-Based Internet Laboratory Management System login.php AuthenticateUser sql injectionCVE-2025-10599itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  25. itsourcecode Gym Management System manage_user.php sql injectionCVE-2024-6041itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  26. itsourcecode Apartment Management System addemployee.php sql injectionCVE-2025-9417itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in