Skip to content

Itsourcecode · weakness class

SQL Injection

618 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 618 is a mark on the map. Named now: 209 to 234, most at risk first.

  1. itsourcecode Billing System login_crud.php sql injectionCVE-2025-12617itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  2. itsourcecode Event Management System manage_register.php sql injectionCVE-2026-2691itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  3. itsourcecode Online Discussion Forum admin sql injectionCVE-2025-10033itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  4. itsourcecode Sports Management System mode.php sql injectionCVE-2025-9768itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  5. itsourcecode Employee Management System index.php sql injectionCVE-2025-8172itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  6. itsourcecode Online Examination System index.php sql injectionCVE-2025-11736itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  7. itsourcecode News Portal Project Administrator Login index.php sql injectionCVE-2026-2225itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  8. itsourcecode Student Management System index.php sql injectionCVE-2026-2014itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  9. itsourcecode Student Management System index.php sql injectionCVE-2026-2013itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  10. itsourcecode Alton Management System team_save.php sql injectionCVE-2024-7278itsourcecode · CVSS 4.7 · 0.5% likely

    CWE-89

  11. itsourcecode Online Tour and Travel Management System forget_password.php sql injectionCVE-2025-9155itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  12. itsourcecode Sports Management System match.php sql injectionCVE-2025-8925itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  13. itsourcecode Employee Management System changepassword.php sql injectionCVE-2025-7127itsourcecode · CVSS 4.7 · 0.5% likely

    CWE-89

  14. itsourcecode Employee Management System adminprofile.php sql injectionCVE-2025-7126itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  15. itsourcecode Employee Management System editempeducation.php sql injectionCVE-2025-7125itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  16. itsourcecode Online Frozen Foods Ordering System customer_details.php sql injectionCVE-2025-15074itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  17. itsourcecode Document Management System register.php sql injectionCVE-2026-3153itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  18. itsourcecode College Management System login.php sql injectionCVE-2026-3151itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  19. itsourcecode Student Information Management System index.php sql injectionCVE-2025-10113itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  20. itsourcecode Student Information Management System index.php sql injectionCVE-2025-10112itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  21. itsourcecode Online Discussion Forum add_views.php sql injectionCVE-2025-10068itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  22. itsourcecode Insurance Management System insertNominee.php sql injectionCVE-2025-7904itsourcecode · CVSS 6.3 · 0.5% likely

    CWE-89

  23. itsourcecode COVID Tracking System page sql injectionCVE-2025-14585itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  24. itsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionCVE-2025-13298itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  25. itsourcecode Online Voting System login.php sql injectionCVE-2025-13285itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  26. itsourcecode Employee Record Management System editprofile.php sql injectionCVE-2025-6351itsourcecode · CVSS 6.3 · 0.4% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in