itsourcecode has 76 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 64 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 33. The median CVSS is 6.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-74 (72) and CWE-89 (72). Most affected products: Sales and Inventory System (22), Leave Management System (9), Online Admission System (9).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 64 prev 0
Products
- Sales and Inventory System 22
- Leave Management System 9
- Online Admission System 9
- Online Cake Ordering System 9
- web-based_internet_laboratory_management_system 6
- Sales-and-Inventory-System 3
Worst active — by depth score
CVE-2026-105253High· 7.3A vulnerability was determined in itsourcecode Online Admission System Project 1.052CVE-2026-105185High· 7.3A vulnerability was detected in itsourcecode Online Admission System 1.052CVE-2026-105184High· 7.3A security vulnerability has been detected in itsourcecode Online Admission System 1.052CVE-2026-105183High· 7.3A weakness has been identified in itsourcecode Online Admission System 1.052CVE-2026-105172High· 7.3A vulnerability was detected in itsourcecode Online Admission System 1.052
itsourcecode vulnerabilities
CVEs affecting itsourcecode, newest first. Open any entry for full detail, references, and exploit status.
76 CVEsRSS
CVE-2026-116515Medium· 6.3PoCitsourcecode Online Book Store book.php sql injection
A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to …
CVE-2026-116514Medium· 4.3itsourcecode Airline Reservation System book_flight.php cross site scripting
A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be ex…
CVE-2026-116101Medium· 6.3itsourcecode Online Cake Ordering System deletetransac.php sql injection
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be perfor…
CVE-2026-114384Medium· 6.3PoCitsourcecode Online Cake Ordering System transactionsave.php sql injection
A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be…
CVE-2026-114380Medium· 6.3itsourcecode Online Cake Ordering System inserttrans.php sql injection
A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument prcd results in sql injection. The attack is possible to b…
CVE-2026-114381Medium· 6.3PoCitsourcecode Online Cake Ordering System orderdetail.php sql injection
A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation of the argument ID can lead to sql injection. The attack m…
CVE-2026-114378Medium· 6.3PoCitsourcecode Online Cake Ordering System deleteproduct.php sql injection
A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely.…
CVE-2026-114250Medium· 6.3itsourcecode Sales-and-Inventory-System cust_edit.php sql injection
A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/cust_edit.php. This manipulation of the argument ID causes sql…
CVE-2026-114251Medium· 6.3PoCitsourcecode Sales-and-Inventory-System cust_del.php sql injection
A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/cust_del.php. Such manipulation of the argument ID leads to sql …
CVE-2026-114252Medium· 6.3itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection
A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/cust_searchfrm.php. Performing a manipulation of the argu…
CVE-2026-113740Medium· 6.3PoCitsourcecode Online Cake Ordering System deletecustomer.php sql injection
A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation of the argument ID causes sql injection. The attack is p…
CVE-2026-113741Medium· 4.3PoCitsourcecode Online Cake Ordering System 404.php cross site scripting
A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the argument useruid leads to cross site scripting. The attac…
CVE-2026-112087Medium· 6.3PoCitsourcecode Online Cake Ordering System confirm.php sql injection
A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argument cancel causes sql injection. The attack may be initiate…
CVE-2026-108959Medium· 6.3PoCA security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0
A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is pos…
CVE-2026-108928Medium· 6.3PoCA security vulnerability has been detected in itsourcecode Online Admission System 1.0
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of the argument ID leads to sql injection. It is possible to…
CVE-2026-108927Medium· 6.3PoCA weakness has been identified in itsourcecode Baptism Information Management System 1.0
A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the argument b_id causes sql injection. It is possible to in…
CVE-2026-108926Medium· 6.3PoCA security flaw has been discovered in itsourcecode Baptism Information Management System 1.0
A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argument ID results in sql injection. The attack may be perform…
CVE-2026-105253High· 7.3PoCA vulnerability was determined in itsourcecode Online Admission System Project 1.0
A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be …
CVE-2026-105254Medium· 6.3PoCA vulnerability was identified in itsourcecode Online Admission System 1.0
A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remote…
CVE-2026-105185High· 7.3PoCA vulnerability was detected in itsourcecode Online Admission System 1.0
A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiate…
CVE-2026-105187Medium· 6.3PoCA vulnerability has been found in itsourcecode Online Admission System 1.0
A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The…
CVE-2026-105186Medium· 6.3PoCA flaw has been found in itsourcecode Online Admission System 1.0
A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. Th…
CVE-2026-105181Medium· 6.3PoCA vulnerability was identified in itsourcecode Online Admission System 1.0
A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be…
CVE-2026-105184High· 7.3PoCA security vulnerability has been detected in itsourcecode Online Admission System 1.0
A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulation of the argument ID leads to sql injection. It is possi…
CVE-2026-105183High· 7.3PoCA weakness has been identified in itsourcecode Online Admission System 1.0
A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the argument schedid causes sql injection. It is possible to ini…
CVE-2026-105172High· 7.3PoCA vulnerability was detected in itsourcecode Online Admission System 1.0
A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack m…
CVE-2026-104606Medium· 6.3PoCA security flaw has been discovered in itsourcecode Online Admission System Project 1.0
A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be…
CVE-2026-104052Medium· 6.3PoCA vulnerability was determined in itsourcecode Pet Shop Management System 1.0
A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulation of the argument ID causes sql injection. It is possible …
CVE-2026-104053Medium· 6.3PoCA vulnerability was identified in itsourcecode Pet Shop Management System 1.0
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possib…
CVE-2026-103690Medium· 6.3PoCA flaw has been found in itsourcecode Leave Management System 1.0
A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack m…