Skip to content
OpenAdvisories

Vendor

itsourcecode

694 known vulnerabilities.

340 results · Clear filters · Feed

  • Medium 4.7

    itsourcecode Free Hotel Reservation System index.php unrestricted upload

    A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. This manipulation of the argument image causes unrestricted upload. The attack i…

  • Medium 6.3

    itsourcecode College Management System Parameter add-single-student-results.php sql injection

    A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/add-single-student-results.php of the component Parameter Handler. The manipulation of the argument course_code leads …

  • Medium 6.3

    itsourcecode sanitize or validate this input Parameter subjects.php sql injection

    A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. This manipulation of the argument subject_code causes sql inject…

  • Medium 6.3

    itsourcecode College Management System search_student.php sql injection

    A vulnerability has been found in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/search_student.php. The manipulation of the argument Search leads to sql injection. The attack is possible to be carri…

  • Medium 4.7

    itsourcecode Online Doctor Appointment System appointment_action.php sql injection

    A vulnerability was detected in itsourcecode Online Doctor Appointment System 1.0. This issue affects some unknown processing of the file /admin/appointment_action.php. The manipulation of the argument appointment_id results in sql injection. The attack can b…

  • Medium 6.3

    itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection

    A security vulnerability has been detected in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /admin/admin_edit_supplier.php. The manipulation of the argument Supplier_Name leads to sql injection. The …

  • Medium 4.7

    itsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injection

    A weakness has been identified in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /admin/admin_edit_employee.php. Executing a manipulation of the argument First_Name can lead to sql injection. It is possible to l…

  • Medium 4.7

    itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection

    A security flaw has been discovered in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin_edit_menu.php. Performing a manipulation of the argument product_name results in sql inj…

  • Medium 4.7

    itsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injection

    A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin_edit_menu_action.php. Such manipulation of the argument product_name leads to sql injec…

  • Medium 6.3

    itsourcecode College Management System time-table.php sql injection

    A vulnerability was identified in itsourcecode College Management System 1.0. The impacted element is an unknown function of the file /admin/time-table.php. Such manipulation of the argument course_code leads to sql injection. The attack can be launched remot…

  • Medium 4.7

    itsourcecode College Management System courses.php sql injection

    A vulnerability has been found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/courses.php. The manipulation of the argument course_code leads to sql injection. It is possible to initiate the attack…

  • Medium 4.3

    itsourcecode Payroll Management System manage_employee_deductions.php cross site scripting

    A security vulnerability has been detected in itsourcecode Payroll Management System 1.0. This vulnerability affects unknown code of the file /manage_employee_deductions.php. Such manipulation of the argument ID leads to cross site scripting. The attack may b…

  • Medium 4.3

    itsourcecode University Management System view_result.php cross site scripting

    A vulnerability was determined in itsourcecode University Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_result.php. Executing a manipulation of the argument vr can lead to cross site scripting. The attack …

  • Medium 4.3

    itsourcecode Payroll Management System manage_employee_allowances.php cross site scripting

    A vulnerability was determined in itsourcecode Payroll Management System 1.0. Affected is an unknown function of the file /manage_employee_allowances.php. This manipulation of the argument ID causes cross site scripting. The attack is possible to be carried o…

  • Medium 6.3

    itsourcecode sanitize or validate this input teacher-attendance.php sql injection

    A weakness has been identified in itsourcecode sanitize or validate this input 1.0. Affected is an unknown function of the file /admin/teacher-attendance.php. Executing a manipulation of the argument teacher_id can lead to sql injection. The attack may be lau…

  • Medium 4.7

    itsourcecode College Management System class-result.php sql injection

    A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/class-result.php. Performing a manipulation of the argument course_code results in sql injection. The attack can be initiate…

  • Medium 4.7

    itsourcecode College Management System student-fee.php sql injection

    A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll_no leads to sql injection. It is possible to launch the attack rem…

  • Medium 4.3

    itsourcecode University Management System att_single_view.php cross site scripting

    A vulnerability was detected in itsourcecode University Management System 1.0. This affects an unknown part of the file /att_single_view.php. The manipulation of the argument dt results in cross site scripting. The attack can be executed remotely. The exploit…

  • Medium 6.3

    itsourcecode College Management System display-teacher.php sql injection

    A security vulnerability has been detected in itsourcecode College Management System 1.0. This affects an unknown part of the file /admin/display-teacher.php. The manipulation of the argument teacher_id leads to sql injection. The attack is possible to be car…

  • Medium 6.3

    itsourcecode College Management System asign-single-student-subjects.php sql injection

    A weakness has been identified in itsourcecode College Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/asign-single-student-subjects.php. Executing a manipulation of the argument course_code can lead to sql injec…

  • Medium 4.3

    itsourcecode Event Management System navbar.php cross site scripting

    A flaw has been found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. The attack may be performed from remo…

  • Medium 4.7

    itsourcecode News Portal Project aboutus.php sql injection

    A vulnerability was determined in itsourcecode News Portal Project 1.0. This affects an unknown part of the file /admin/aboutus.php. This manipulation of the argument pagetitle causes sql injection. The attack may be initiated remotely. The exploit has been p…

  • Medium 6.3

    itsourcecode School Management System controller.php sql injection

    A weakness has been identified in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/course/controller.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. …

  • Medium 4.3

    itsourcecode Society Management System activity.php cross site scripting

    A security flaw has been discovered in itsourcecode Society Management System 1.0. This impacts an unknown function of the file /admin/activity.php. The manipulation of the argument Title results in cross site scripting. The attack may be launched remotely. T…

  • Medium 4.3

    itsourcecode Society Management System expenses.php cross site scripting

    A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown function of the file /admin/expenses.php. The manipulation of the argument detail leads to cross site scripting. The attack may be initiated remotely. The ex…

  • Medium 6.3

    itsourcecode Society Management System add_activity.php sql injection

    A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is an unknown function of the file /admin/add_activity.php. Performing a manipulation of the argument Title results in sql injection. It is possible to initiate the attack re…

  • Medium 6.3

    itsourcecode Society Management System edit_activity_query.php sql injection

    A vulnerability was identified in itsourcecode Society Management System 1.0. This affects an unknown part of the file /admin/edit_activity_query.php. The manipulation of the argument Title leads to sql injection. The attack may be initiated remotely. The exp…

  • Medium 6.3

    itsourcecode Student Information System section_edit1.php sql injection

    A vulnerability has been found in itsourcecode Student Information System 1.0. This affects an unknown part of the file /section_edit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit …

  • Medium 6.3

    itsourcecode Student Information System schedule_edit1.php sql injection

    A vulnerability was identified in itsourcecode Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /schedule_edit1.php. Such manipulation of the argument schedule_id leads to sql injection. The attack may be …

  • Medium 6.3

    itsourcecode COVID Tracking System page sql injection

    A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=state. Performing manipulation of the argument ID results in sql injection. The attack may be initiated re…

  • Medium 6.3

    itsourcecode COVID Tracking System page sql injection

    A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been dis…

  • Medium 6.3

    itsourcecode COVID Tracking System page sql injection

    A flaw has been found in itsourcecode COVID Tracking System 1.0. This impacts an unknown function of the file /admin/?page=people. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published …

  • Medium 6.3

    itsourcecode COVID Tracking System page sql injection

    A vulnerability was detected in itsourcecode COVID Tracking System 1.0. This affects an unknown function of the file /admin/?page=establishment. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The ex…

  • Medium 6.3

    itsourcecode Student Information System enrollment_edit1.php sql injection

    A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. Executing manipulation of the argument en_id can lead to sql injection. The attack may be performed f…

  • Medium 6.3

    itsourcecode Online Voting System index.php sql injection

    A weakness has been identified in itsourcecode Online Voting System 1.0. This affects an unknown function of the file /index.php?page=categories. Executing manipulation of the argument id/category can lead to sql injection. The attack can be executed remotely…

  • Medium 6.3

    itsourcecode Online Voting System ajax.php sql injection

    A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_user. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the a…

  • Medium 6.3

    itsourcecode Inventory Management System index.php sql injection

    A vulnerability was identified in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=edit. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely.…

  • Medium 6.3

    itsourcecode Inventory Management System index.php sql injection

    A vulnerability was found in itsourcecode Inventory Management System 1.0. The impacted element is an unknown function of the file /index.php?q=product. Performing manipulation of the argument PROID results in sql injection. It is possible to initiate the att…

  • Medium 4.7

    itsourcecode Inventory Management System index.php sql injection

    A security vulnerability has been detected in itsourcecode Inventory Management System 1.0. This impacts an unknown function of the file /admin/products/index.php?view=add. Such manipulation of the argument PROMODEL leads to sql injection. The attack may be p…

  • Medium 6.3

    itsourcecode Online Voting System index.php unrestricted upload

    A vulnerability was detected in itsourcecode Online Voting System 1.0. This impacts an unknown function of the file /index.php?page=manage_voting. Performing manipulation results in unrestricted upload. The attack is possible to be carried out remotely. The e…