Skip to content
OpenAdvisories

Vendor

itsourcecode

694 known vulnerabilities.

340 results · Clear filters · Feed

  • Medium 6.3

    itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the at…

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_edit1.php sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The…

  • Medium 6.3

    itsourcecode Sales and Inventory System pro_searchfrm.php sql injection

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been p…

  • Medium 6.3

    itsourcecode Sales and Inventory System us_edit1.php sql injection

    A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/us_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The …

  • Medium 6.3

    itsourcecode Sales and Inventory System settings_edit.php sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/settings_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remo…

  • Medium 6.3

    itsourcecode Sales and Inventory System emp_edit1.php sql injection

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/emp_edit1.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. T…

  • Medium 6.3

    itsourcecode Information System Society Membership System check_student.php sql injection

    A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. This issue affects some unknown processing of the file /society/check_student.php. The manipulation of the argument student_id leads to sql injection.…

  • Medium 6.3

    itsourcecode Sales and Inventory System us_transac.php sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/us_transac.php. Such manipulation of the argument Username leads to sql injection. It is possible to l…

  • Medium 6.3

    itsourcecode Sales and Inventory System sup_transac.php sql injection

    A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_transac.php. Performing a manipulation of the argument companyname results in sql injection. It is p…

  • Medium 6.3

    itsourcecode Sales and Inventory System pro_transac.php add sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro_transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched …

  • Medium 6.3

    itsourcecode Sales and Inventory System pos_transac.php add sql injection

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/pos_transac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely.…

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_transac.php add sql injection

    A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack …

  • Medium 6.3

    itsourcecode Sales and Inventory System us_del.php sql injection

    A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/us_del.php?type=user. The manipulation of the argument ID leads to sql injection. It is possible…

  • Medium 6.3

    itsourcecode Sales and Inventory System sup_del.php sql injection

    A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_del.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The …

  • Medium 6.3

    itsourcecode Sales and Inventory System trans_view.php sql injection

    A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans_view.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The e…

  • Medium 6.3

    itsourcecode Sales and Inventory System pro_del.php sql injection

    A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The …

  • Medium 6.3

    itsourcecode Sales and Inventory System inv_del.php sql injection

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_del.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The e…

  • Medium 6.3

    itsourcecode Online Medicine Delivery System Wishlist controller.php addwishlist sql injection

    A vulnerability was determined in itsourcecode Online Medicine Delivery System 1.0. This issue affects the function addwishlist of the file /customer/controller.php?action=addwish of the component Wishlist. This manipulation of the argument proid causes sql i…

  • Medium 6.3

    itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload

    A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller.php?action=photos of the component Customer Controller. Executing a manipulation …

  • Medium 6.3

    itsourcecode Sales and Inventory System inv_searchfrm.php sql injection

    A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. T…

  • Medium 6.3

    itsourcecode Sales and Inventory System inv_edit.php sql injection

    A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The ex…

  • Medium 6.3

    itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/sup_searchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit …

  • Medium 6.3

    itsourcecode Sales and Inventory System sup_edit.php sql injection

    A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_edit.php. The manipulation of the argument ID results in sql injection. The attack can be exe…

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

    A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_searchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th…

  • Medium 6.3

    itsourcecode Sales and Inventory System pro_edit.php sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/pro_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched …

  • Medium 6.3

    itsourcecode Sales and Inventory System emp_searchfrm.php sql injection

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/emp_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been p…

  • Medium 6.3

    itsourcecode Sales and Inventory System emp_del.php sql injection

    A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit …

  • Medium 6.3

    itsourcecode Sales and Inventory System emp_edit.php sql injection

    A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The ex…

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_del.php sql injection

    A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been …

  • Medium 6.3

    itsourcecode Library Management System editbooks.php sql injection

    A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit…

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_edit.php sql injection

    A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/cust_edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The e…

  • Medium 6.3

    itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

    A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System viewappointmentpending.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentpending.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotel…

  • Medium 6.3

    itsourcecode Hospital Management System viewappointmentapproved.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is pos…

  • Medium 6.3

    itsourcecode Hospital Management System viewbilling.php sql injection

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The ex…

  • Medium 6.3

    itsourcecode Hospital Management System viewdepartment.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System viewroom.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely.…

  • Medium 6.3

    itsourcecode Hospital Management System viewprescriptionrecord.php sql injection

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the att…

  • Medium 6.3

    itsourcecode Hospital Management System viewpaymentreport.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible t…

  • Medium 6.3

    itsourcecode Hospital Management System viewpatient.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit h…