Skip to content
OpenAdvisories

Vendor

itsourcecode

694 known vulnerabilities.

694 results · Feed

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

    A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_searchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th…

  • Medium 6.3

    itsourcecode Sales and Inventory System pro_edit.php sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/pro_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched …

  • Medium 6.3

    itsourcecode Sales and Inventory System emp_searchfrm.php sql injection

    A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/emp_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been p…

  • Medium 6.3

    itsourcecode Sales and Inventory System emp_del.php sql injection

    A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit …

  • Medium 6.3

    itsourcecode Sales and Inventory System emp_edit.php sql injection

    A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The ex…

  • High 7.3

    itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

    A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authenti…

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_del.php sql injection

    A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been …

  • High 7.3

    itsourcecode Online Clinic Management System Admin Login login.php sql injection

    A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote ex…

  • High 7.3

    itsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted upload

    A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function move_uploaded_file of the file all_users/register.php of the component User Registration. Executing a manipulation of the argument photo can lead to unrestricted uploa…

  • High 7.3

    itsourcecode Real Estate Management System search.php sql injection

    A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/delivery_type/search_price/property_type results in s…

  • High 7.3

    itsourcecode Payroll System admin_class.php save_settings unrestricted upload

    A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has be…

  • High 7.3

    itsourcecode Payroll System admin_class.php login sql injection

    A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file admin_class.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The…

  • Medium 6.3

    itsourcecode Library Management System editbooks.php sql injection

    A flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit…

  • Medium 6.3

    itsourcecode Sales and Inventory System cust_edit.php sql injection

    A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/cust_edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The e…

  • High 7.3

    itsourcecode Sales and Inventory System processlogin.php sql injection

    A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to init…

  • Medium 6.3

    itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection

    A flaw has been found in itsourcecode Hospital Management System Project in PHP 1.0. This impacts an unknown function of the file /viewservicetype.php. This manipulation of the argument delid causes sql injection. The attack may be initiated remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System viewappointmentpending.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentpending.php. This manipulation of the argument delid causes sql injection. The attack is possible to be carried out remotel…

  • Medium 6.3

    itsourcecode Hospital Management System viewappointmentapproved.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown part of the file /viewappointmentapproved.php. Performing a manipulation of the argument delid results in sql injection. Remote exploitation of the attack is pos…

  • Medium 6.3

    itsourcecode Hospital Management System viewbilling.php sql injection

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The ex…

  • Medium 6.3

    itsourcecode Hospital Management System viewdepartment.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System viewroom.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewroom.php. Such manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely.…

  • Medium 6.3

    itsourcecode Hospital Management System viewprescriptionrecord.php sql injection

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /viewprescriptionrecord.php. The manipulation of the argument delid results in sql injection. It is possible to launch the att…

  • Medium 6.3

    itsourcecode Hospital Management System viewpaymentreport.php sql injection

    A vulnerability was found in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpaymentreport.php. Performing a manipulation of the argument delid results in sql injection. It is possible t…

  • Medium 6.3

    itsourcecode Hospital Management System viewpatient.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewpatient.php. Such manipulation of the argument delid leads to sql injection. The attack may be performed from remote. The exploit h…

  • Medium 6.3

    itsourcecode Hospital Management System vieworder.php sql injection

    A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argument delid leads to sql injection. The attack is possible to be carried out remotely. The e…

  • Medium 6.3

    itsourcecode Hospital Management System viewmedicine.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. …

  • Medium 6.3

    itsourcecode Hospital Management System viewdoctortimings.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file viewdoctortimings.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed …

  • Medium 6.3

    itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection

    A vulnerability was determined in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /viewdoctorconsultancycharge.php. This manipulation of the argument delid causes sql injection. The attack is possible to be…

  • Medium 6.3

    itsourcecode Hospital Management System viewdoctor.php sql injection

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exp…

  • Medium 6.3

    itsourcecode Hospital Management System viewappointment.php sql injection

    A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. The exploit h…

  • Medium 6.3

    itsourcecode Hospital Management System viewadmin.php sql injection

    A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. The manipulation of the argument delid results in sql injection. The attack may be performed from remote. The exploit is …

  • Medium 6.3

    itsourcecode Hospital Management System treatmentrecord.php sql injection

    A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treatmentrecord.php. The manipulation of the argument editid leads to sql injection. The attack is possible to be carried …

  • Medium 6.3

    itsourcecode Hospital Management System treatmentdetail.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treatmentdetail.php. Executing a manipulation of the argument patientid can lead to sql injection. The attack can be execut…

  • Medium 6.3

    itsourcecode Hospital Management System treatment.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file /treatment.php. Performing a manipulation of the argument editid results in sql injection. Remote exploitation of the a…

  • Medium 6.3

    itsourcecode Hospital Management System servicetype.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /servicetype.php. This manipulation of the argument editid causes sql injection. It is possible to initiate t…

  • Medium 6.3

    itsourcecode Hospital Management System prescription.php sql injection

    A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /prescription.php. The manipulation of the argument editid results in sql injection. The attack can be executed remotely. The explo…

  • Medium 6.3

    itsourcecode Hospital Management System prescriptionorder.php sql injection

    A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. Th…

  • Medium 6.3

    itsourcecode Hospital Management System prescriptionorderreport.php sql injection

    A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /prescriptionorderreport.php. Such manipulation of the argument delid leads to sql injection. The…

  • Medium 4.3

    itsourcecode Courier Management System index.php cross site scripting

    A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to lau…

  • Medium 6.3

    itsourcecode Hospital Management System prescriptionrecord.php sql injection

    A weakness has been identified in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /prescriptionrecord.php. This manipulation of the argument delid causes sql injection. It is possible to initiate the attack remotely. …