Skip to content

Itsourcecode · product

Student Management System

25 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

  1. itsourcecode Student Management System Login Page login.php sql injectionCVE-2024-6191itsourcecode · CVSS 7.3 · 0.6% likely

    CWE-89

  2. itsourcecode Student Management System newrecord.php sql injectionCVE-2025-14257itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  3. itsourcecode Student Management System newcurriculm.php sql injectionCVE-2025-14256itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  4. itsourcecode Student Management System index.php sql injectionCVE-2026-2014itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  5. itsourcecode Student Management System index.php sql injectionCVE-2026-2013itsourcecode · CVSS 7.3 · 0.5% likely

    CWE-89

  6. itsourcecode Student Management System student_p.php sql injectionCVE-2025-15075itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  7. itsourcecode Student Management System update_program.php sql injectionCVE-2025-14588itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  8. itsourcecode Student Management System update_account.php sql injectionCVE-2025-14578itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  9. itsourcecode Student Management System new_grade.php sql injectionCVE-2025-14337itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  10. itsourcecode Student Management System promote.php sql injectionCVE-2025-14336itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  11. itsourcecode Student Management System new_school_year.php sql injectionCVE-2025-14335itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  12. itsourcecode Student Management System new_adviser.php sql injectionCVE-2025-14334itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  13. itsourcecode Student Management System newsubject.php sql injectionCVE-2025-14258itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  14. itsourcecode Student Management System edit_user.php sql injectionCVE-2025-14226itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  15. itsourcecode Student Management System index.php sql injectionCVE-2026-2012itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  16. itsourcecode Student Management System controller.php sql injectionCVE-2026-2011itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  17. itsourcecode Student Management System record.php sql injectionCVE-2025-15034itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  18. itsourcecode Student Management System candidates_report.php sql injectionCVE-2025-14967itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  19. itsourcecode Student Management System addrecord.php sql injectionCVE-2025-14653itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  20. itsourcecode Student Management System update_subject.php sql injectionCVE-2025-14644itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  21. itsourcecode Student Management System uprec.php sql injectionCVE-2025-14639itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  22. itsourcecode Student Management System list_report.php sql injectionCVE-2025-15078itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  23. itsourcecode Student Management System form137.php sql injectionCVE-2025-15077itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  24. itsourcecode Student Management System statistical.php sql injectionCVE-2025-15168itsourcecode · CVSS 7.3 · 0.4% likely

    CWE-89

  25. itsourcecode Student Management System Add Student add_student cross site scriptingCVE-2026-2939itsourcecode · CVSS 2.4 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.