VYPR

Vendor CVEs

Itsourcecode

All CVEs

653 total · sorted by risk
  • CVE-2024-6956MedJul 21, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode University Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view_cgpa.php. The manipulation of the argument VR/VN leads to sql injection. The attack may be launched…

  • CVE-2024-6953MedJul 21, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file sms.php. The manipulation of the argument customer leads to sql injection. The attack may be initiated remotely. The…

  • CVE-2024-6952MedJul 21, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability has been found in itsourcecode University Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view_single_result.php?vr=123321&vn=mirage. The manipulation of the argument seme leads to sql injection. The attack…

  • CVE-2024-6735MedJul 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file setgeneral.php. The manipulation of the argument sitename/email/mobile/sms/currency leads to sql injection. The attack…

  • CVE-2024-6734MedJul 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file templateadd.php. The manipulation of the argument title/msg leads to sql injection. It is possible to initiate the attack…

  • CVE-2024-6733MedJul 14, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file templateedit.php. The manipulation of the argument id/title/msg leads to sql injection. The attack may be…

  • CVE-2024-6728MedJul 14, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file typeedit.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The…

  • CVE-2024-6652MedJul 10, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file manage_member.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The…

  • CVE-2024-6453MedJul 2, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Farm Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /quarantine.php?id=3. The manipulation of the argument pigno/breed/reason leads to sql injection. The…

  • CVE-2024-6372MedJun 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file customeradd.php. The manipulation of the argument fullname/address/phonenumber/sex/email/city/comment leads to sql injection. It…

  • CVE-2024-6195MedJun 20, 2024
    risk 0.41cvss 6.3epss 0.00

    A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file orderadd.php. The manipulation of the argument customer leads to sql injection. The attack can be…

  • CVE-2024-6194MedJun 20, 2024
    risk 0.41cvss 6.3epss 0.00

    A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file editmeasurement.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack…

  • CVE-2024-6109MedJun 18, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file addmeasurement.php. The manipulation of the argument id leads to sql injection. The attack can be…

  • CVE-2024-6041MedJun 16, 2024
    risk 0.41cvss 6.3epss 0.00

    A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched…

  • CVE-2024-6016MedJun 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability, which was classified as critical, has been found in itsourcecode Online Laundry Management System 1.0. Affected by this issue is some unknown functionality of the file admin_class.php. The manipulation of the argument id leads to sql injection. The attack may be…

  • CVE-2024-6015MedJun 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability classified as critical was found in itsourcecode Online House Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_user.php. The manipulation of the argument month_of leads to sql injection. The attack can be launched…

  • CVE-2024-6014MedJun 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability classified as critical has been found in itsourcecode Document Management System 1.0. Affected is an unknown function of the file edithis.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit…

  • CVE-2024-6013MedJun 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Online Book Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file admin_delete.php. The manipulation of the argument bookisbn leads to sql injection. The attack may be initiated remotely. The…

  • CVE-2024-6009MedJun 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability has been found in itsourcecode Event Calendar 1.0 and classified as critical. Affected by this vulnerability is the function regConfirm/regDelete of the file process.php. The manipulation of the argument userId leads to sql injection. The attack can be launched…

  • CVE-2024-6008MedJun 15, 2024
    risk 0.41cvss 6.3epss 0.00

    A vulnerability, which was classified as critical, was found in itsourcecode Online Book Store up to 1.0. Affected is an unknown function of the file /edit_book.php. The manipulation of the argument image leads to sql injection. It is possible to launch the attack remotely. The…

  • CVE-2024-5981MedJun 14, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Online House Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely.…

  • CVE-2024-5898MedJun 12, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Payroll Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file print_payroll.php. The manipulation of the argument id leads to sql injection. The attack may be launched…

  • CVE-2024-5734MedJun 7, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. Affected is an unknown function of the file /members/poster.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely.…

  • CVE-2024-5636MedJun 5, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be…

  • CVE-2024-5635MedJun 4, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be…

  • CVE-2024-5588MedJun 2, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can…

  • CVE-2024-5518MedMay 30, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability classified as critical has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file change_profile_picture.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack…

  • CVE-2024-5516MedMay 30, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file massage.php. The manipulation of the argument bid leads to sql injection. The attack can be…

  • CVE-2024-5397MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file instructorSubjects.php. The manipulation of the argument instructorId leads to sql injection. The attack…

  • CVE-2024-5396MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file newfaculty.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The…

  • CVE-2024-5395MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file listofinstructor.php. The manipulation of the argument FullName leads to sql injection. The attack may be…

  • CVE-2024-5394MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file newDept.php. The manipulation of the argument deptname leads to sql injection. The attack can be initiated…

  • CVE-2024-5393MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file listofcourse.php. The manipulation of the argument idno leads to sql injection. It is possible to initiate the attack…

  • CVE-2024-5392MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file editSubject.php. The manipulation of the argument id leads to sql injection. The attack may be launched…

  • CVE-2024-5391MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file listofsubject.php. The manipulation of the argument subjcode leads to sql injection. The attack…

  • CVE-2024-5390MedMay 27, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affected is an unknown function of the file listofstudent.php. The manipulation of the argument lname leads to sql injection. It is possible to launch the attack…

  • CVE-2024-5381MedMay 26, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by this vulnerability is an unknown functionality of the file view.php. The manipulation of the argument studentId leads to sql injection. The attack can be…

  • CVE-2024-3768MedApr 15, 2024
    risk 0.41cvss 6.3epss 0.01

    A vulnerability, which was classified as critical, has been found in PHPGurukul/itsourcecode News Portal 4.1. This issue affects some unknown processing of the file search.php. The manipulation of the argument searchtitle leads to sql injection. The attack may be initiated…

  • CVE-2024-50656MedFeb 3, 2025
    risk 0.40cvss 6.1epss 0.00

    itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php.

  • CVE-2024-46300MedOct 7, 2024
    risk 0.40cvss 6.1epss 0.00

    itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php.

  • CVE-2023-34486MedJun 29, 2023
    risk 0.40cvss 6.1epss 0.01

    itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be achieved by entering malicious code in the date selection box.

  • CVE-2023-31816MedMay 22, 2023
    risk 0.40cvss 6.1epss 0.00

    IT Sourcecode Content Management System Project In PHP and MySQL With Source Code 1.0.0 is vulnerable to Cross Site Scripting (XSS) via /ecodesource/search_list.php.

  • CVE-2024-6803MedJul 17, 2024
    risk 0.36cvss 5.5epss 0.01

    A vulnerability has been found in itsourcecode Document Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file insert.php. The manipulation of the argument anothercont leads to sql injection. The attack can be…

  • CVE-2024-52676MedDec 4, 2024
    risk 0.35cvss 5.4epss 0.00

    Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting (XSS) via /bcc_forum/members/home.php.

  • CVE-2024-46077MedOct 4, 2024
    risk 0.35cvss 5.4epss 0.00

    itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_name parameters in travellers.php.

  • CVE-2024-8216MedAug 27, 2024
    risk 0.35cvss 5.4epss 0.00

    A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file editPayment.php of the component Payment Handler. The manipulation of the argument…

  • CVE-2024-42918MedAug 23, 2024
    risk 0.35cvss 5.4epss 0.00

    itsourcecode Online Accreditation Management System contains a Cross Site Scripting vulnerability, which allows an attacker to execute arbitrary code via a crafted payload to the SCHOOLNAME, EMAILADDRES, CONTACTNO, COMPANYNAME and COMPANYCONTACTNO parameters in controller.php.

  • CVE-2024-48415MedOct 22, 2024
    risk 0.33cvss 5.0epss 0.00

    itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in new borrowers functionality on the Borrowers page.

  • CVE-2026-7612MedMay 2, 2026
    risk 0.31cvss 4.7epss 0.00

    A vulnerability was determined in itsourcecode Courier Management System 1.0. Affected is an unknown function of the file /edit_user.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly…

  • CVE-2026-4875MedMar 26, 2026
    risk 0.31cvss 4.7epss 0.00

    A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. This manipulation of the argument image causes unrestricted upload. The attack is possible to be…

Page 11 of 14