PT-2025-38275

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Commerce Website version 1.0 Description: A security flaw has been discovered that allows for unrestricted upload. The issue affects an unknown function within the /admin/users.php file and can be exploited remotely. The exploi...

PT-2025-38256

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Logbook with Health Monitoring System for COVID-19 version 1.0 Description: A cross-site scripting issue exists due to manipulation of the profile id argument in the /print reports prev.php file. This allows for remote attacks...

PT-2025-38251

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information System version 1.0 Description: A SQL injection issue exists in itsourcecode Student Information System 1.0 due to manipulation of the level id argument in the /leveledit1.php file. The issue is exploitable...

itsourcecode E-Logbook with Health Monitoring System for COVID-19 代码注入漏洞

itsourcecode E-Logbook with Health Monitoring System for COVID-19 is an electronic logging system for the New Crown Pneumonia Health Monitoring System for COVID-19 open source by itsourcecode. A code injection vulnerability exists in itsourcecode E-Logbook with Health Monitoring System for COVID-...

PT-2025-38263

Name of the Vulnerable Software and Affected Versions: itsourcecode E-Commerce Website version 1.0 Description: A vulnerability exists in itsourcecode E-Commerce Website 1.0, impacting an unknown function within the /admin/products.php file. This allows for unrestricted file upload, and the attac...

itsourcecode Online Public Access Catalog OPAC SQL注入漏洞

itsourcecode Online Public Access Catalog OPAC is an online public access catalog of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Public Access Catalog OPAC, which stems from incorrect manipulation of the parameters searchfield and searchtex...

PT-2025-38280

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Clinic Management System version 1.0 Description: A flaw has been found in the itsourcecode Online Clinic Management System. The vulnerability affects unknown code within the /editp2.php file. Manipulation of the id,...

itsourcecode E-Commerce Website 代码问题漏洞

itsourcecode E-Commerce Website is an open source e-commerce website by itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode E-Commerce Website, which originates from an unlimited upload function in file /admin/users.php, which could lead to a remote attack...

itsourcecode Student Information System 安全漏洞

itsourcecode Student Information System is an open source student information system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Information System, which stems from an incorrect manipulation of the parameter levelid in the file /leveledit1.php, which...

PT-2025-38223

Name of the Vulnerable Software and Affected Versions: itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description: A security flaw exists in itsourcecode Web-Based Internet Laboratory Management System. Manipulation of the user email argument in the User::AuthenticateUse...

CVE-2025-10426

The CVE-2025-10426 entry concerns itsourcecode Online Laundry Management System 1.0. A SQL injection vulnerability exists in an unknown function of the file /login.php triggered by manipulating the Username argument. The issue is exploitable remotely and exploitation has been publicly released. R...

CVE-2025-10426 itsourcecode Online Laundry Management System login.php sql injection

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

PT-2025-37449

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Laundry Management System version 1.0 Description: A security flaw has been discovered that allows for SQL injection. Manipulation of the Username argument in an unknown function of the file /login.php can trigger this...

itsourcecode Online Laundry Management System SQL注入漏洞

itsourcecode Online Laundry Management System is an online laundry management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Laundry Management System, which stems from an incorrect manipulation of the parameter Username in the fil...

CVE-2025-10411

CVE-2025-10411 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is in the POST Request Handler, where manipulation of the profile_id argument in /stc-log-keeper/check_profile.php enables cross-site scripting. Exploitation can be remote, and public e...

CVE-2025-10411 itsourcecode E-Logbook with Health Monitoring System for COVID-19 POST Request check_profile.php cross site scripting

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site...

CVE-2025-10405 itsourcecode Baptism Information Management System listbaptism.php sql injection

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument baptid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2025-10404 itsourcecode Baptism Information Management System rptbaptismal.php sql injection

A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be...

CVE-2025-10404

CVE-2025-10404 affects the open-source-looking product itsourcecode Baptism Information Management System 1.0 . The vulnerability is in the file /rptbaptismal.php where manipulating the ID parameter leads to a SQL injection . Exploitation is described as remote with a publicly available exploit (...

itsourcecode Baptism Information Management System SQL注入漏洞

itsourcecode Baptism Information Management System is itsourcecode open source information management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Baptism Information Management System, which stems from an incorrect manipulation of the parameter baptid in the file...