Skip to content
OpenAdvisories

Vendor

itsourcecode

695 known vulnerabilities.

338 results · Clear filters · Feed

  • High 7.3

    itsourcecode Online Tour and Travel Management System booking_report.php sql injection

    A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/booking_report.php. The manipulation of the argument from_date leads to sql injection. The at…

  • High 7.3

    itsourcecode Online Tour and Travel Management System email_setup.php sql injection

    A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/email_setup.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack …

  • High 7.3

    itsourcecode Online Tour and Travel Management System sms_setting.php sql injection

    A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/sms_setting.php. The manipulation of the argument uname leads to sql injection. The attack may be initia…

  • High 7.3

    itsourcecode Online Tour and Travel Management System expense_report.php sql injection

    A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expense_report.php. The manipulation of the argument from_date leads to sql injection. It is possible to initiate the attac…

  • High 7.3

    itsourcecode Online Tour and Travel Management System expense_category.php sql injection

    A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/expense_category.php. The manipulation of the argument expense_name leads to sql injection. It is possib…

  • High 7.3

    itsourcecode Online Tour and Travel Management System expense.php sql injection

    A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/expense.php. The manipulation of the argument expense_for leads to sql injection. The attack …

  • High 7.3

    itsourcecode Online Tour and Travel Management System currency.php sql injection

    A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/currency.php. The manipulation of the argument curr_code leads to sql injection. The attack can …

  • High 7.3

    itsourcecode Online Tour and Travel Management System payment.php sql injection

    A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/payment.php. The manipulation of the argument payment_type leads to sql injection. It is possible to initiate th…

  • High 7.3

    itsourcecode Online Tour and Travel Management System page-login.php sql injection

    A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/page-login.php. The manipulation of the argument email leads to sql injection. The attack may be initiat…

  • High 7.3
    CVE-2025-8971 Public exploit

    itsourcecode Online Tour and Travel Management System travellers.php sql injection

    A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/travellers.php. The manipulation of the argument val-username leads to sql injection. The attack…

  • High 7.3

    itsourcecode Online Tour and Travel Management System booking.php sql injection

    A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/booking.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack r…

  • High 7.3

    itsourcecode Online Tour and Travel Management System approve_user.php sql injection

    A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/approve_user.php. The manipulation of the argument ID leads to sql injection. The attack may b…

  • High 7.3

    itsourcecode Online Tour and Travel Management System disapprove_user.php sql injection

    A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/disapprove_user.php. The manipulation of the argument ID leads to sql injection. The att…

  • High 7.3

    itsourcecode Online Tour and Travel Management System packages.php sql injection

    A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/packages.php. The manipulation of the argument pname leads to sql injection. It is possible to launch th…

  • High 7.3

    itsourcecode Online Tour and Travel Management System tax.php sql injection

    A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/tax.php. The manipulation of the argument tname leads to sql injection. The attack may be initiate…

  • High 7.3

    itsourcecode Sports Management System match.php sql injection

    A vulnerability has been found in itsourcecode Sports Management System 1.0. Affected is an unknown function of the file /Admin/match.php. The manipulation of the argument code leads to sql injection. It is possible to launch the attack remotely. The exploit …

  • High 7.3

    itsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injection

    A vulnerability was found in itsourcecode Agri-Trading Online Shopping System up to 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/suppliercontroller.php. The manipulation of the argument supplier leads to sql inje…

  • High 7.3

    itsourcecode Agri-Trading Online Shopping System transactionsave.php sql injection

    A vulnerability has been found in itsourcecode Agri-Trading Online Shopping System 1.0 and classified as critical. This vulnerability affects unknown code of the file /transactionsave.php. The manipulation of the argument del leads to sql injection. The attac…

  • High 7.3

    itsourcecode Sales and Inventory System product_update.php sql injection

    A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/product_update.php. The manipulation of the argument serial leads to sql injection. …

  • High 7.3

    itsourcecode Sales and Inventory System product_add.php sql injection

    A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument serial leads to sql injection. It is possible to launch …

  • High 7.3

    itsourcecode Restaurant Management System assign_save.php sql injection

    A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/assign_save.php. The manipulation of the argument team leads to sql injection. The attack …

  • High 7.3

    itsourcecode Restaurant Management System team_update.php sql injection

    A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_update.php. The manipulation of the argument team leads to sql injection. It is possible to in…

  • High 7.3

    itsourcecode Restaurant Management System user_save.php sql injection

    A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/user_save.php. The manipulation of the argument username/name leads to sql injection…

  • High 7.3

    itsourcecode Restaurant Management System menu_save.php sql injection

    A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. This vulnerability affects unknown code of the file /admin/menu_save.php. The manipulation of the argument menu leads to sql injection. The attack can be initia…

  • High 7.3

    itsourcecode Restaurant Management System member_update.php sql injection

    A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. This affects an unknown part of the file /admin/member_update.php. The manipulation of the argument menu leads to sql injection. It is possible to initiate…

  • High 7.3

    itsourcecode Restaurant Management System member_save.php sql injection

    A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/member_save.php. The manipulation of the argument last leads to sql injection. The attack may …

  • High 7.3

    itsourcecode Restaurant Management System finished.php sql injection

    A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/finished.php. The manipulation of the argument ID leads to sql injection. The attack can be …

  • High 7.3

    itsourcecode Placement Management System view_student.php sql injection

    A vulnerability has been found in itsourcecode Placement Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /view_student.php. The manipulation of the argument ID leads to sql injection. The attack can be ini…

  • High 7.3

    itsourcecode Placement Management System view_drive.php sql injection

    A vulnerability, which was classified as critical, was found in itsourcecode Placement Management System 1.0. This affects an unknown part of the file /view_drive.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the …

  • High 7.3

    itsourcecode Placement Management System student_profile.php sql injection

    A vulnerability, which was classified as critical, has been found in itsourcecode Placement Management System 1.0. Affected by this issue is some unknown functionality of the file /student_profile.php. The manipulation of the argument ID leads to sql injectio…

  • High 7.3

    itsourcecode Placement Management System all_student.php sql injection

    A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /all_student.php. The manipulation of the argument delete leads to sql injection. The atta…

  • High 7.3

    itsourcecode Placement Management System edit_profile.php sql injection

    A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Affected is an unknown function of the file /edit_profile.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the at…

  • High 7.3

    itsourcecode Placement Management System drive.php sql injection

    A vulnerability was found in itsourcecode Placement Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /drive.php. The manipulation of the argument ID leads to sql injection. The attack may be initiate…

  • High 7.3

    itsourcecode Gym Management System ajax.php sql injection

    A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=delete_package. The manipulation of the argument ID leads to sql inj…

  • High 7.3

    itsourcecode Gym Management System ajax.php sql injection

    A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_member. The manipulation of the argument ID leads to sql injection. It is possible to …

  • High 7.3

    itsourcecode Gym Management System ajax.php sql injection

    A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ajax.php?action=delete_plan. The manipulation of the argument ID leads to sql injection. The attack may be …

  • High 7.3

    itsourcecode Gym Management System ajax.php sql injection

    A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /ajax.php?action=delete_trainer. The manipulation of the argument ID leads to sql injection. The attack ca…

  • High 7.3

    itsourcecode Gym Management System ajax.php sql injection

    A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. This affects an unknown part of the file /ajax.php?action=delete_user. The manipulation of the argument ID leads to sql injection. It is possible to initia…

  • High 7.3

    itsourcecode Gym Management System view_pdetails.php sql injection

    A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /view_pdetails.php. The manipulation of the argument ID leads to sql injection. The a…

  • High 7.3

    itsourcecode Gym Management System ajax.php sql injection

    A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=save_payment. The manipulation of the argument registration_id leads to sql injection. It is pos…