CVE-2024-6191

A vulnerability classified as critical has been found in itsourcecode Student Management System 1.0. This affects an unknown part of the file login.php of the component Login Page. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-6196

A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2024-6253

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2024-6190

A vulnerability was found in itsourcecode Farm Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched...

CVE-2024-8567

A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletedeductions. The manipulation of the argument id leads to sql injection. The attack may be initiated...

CVE-2024-50656

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

itsourcecode Placement Management System 安全漏洞

itsourcecode Placement Management System is an open source placement management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Placement Management System, which originates from an easy cross-site scripting XSS attack via the full name field in...

CVE-2024-50656: Improper Neutralization of Input During Web Page Generation

itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting XSS via the Full Name field in registration.php...

PT-2025-2877

Name of the Vulnerable Software and Affected Versions itsourcecode Placement Management System version 1.0 Description The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via the Full Name field in the "registration.php" endpoint. This allows for potential malicious...

CVE-2025-0950

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file staffview.php. The manipulation of the argument staffid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-0950 itsourcecode Tailoring Management System staffview.php sql injection

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file staffview.php. The manipulation of the argument staffid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-0950

CVE-2025-0950 affects itsourcecode Tailoring Management System version 1.0. The vulnerability resides in staffview.php where manipulating the staffid parameter leads to SQL injection. The issue is remotely triggerable and the exploit has been disclosed publicly. Multiple sources consistently desc...

CVE-2025-0949

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the argument typeid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-0949 itsourcecode Tailoring Management System partview.php sql injection

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the argument typeid leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-0949

CVE-2025-0949 affects itsourcecode Tailoring Management System 1.0. The vulnerability is in partview.php where improper handling of the typeid parameter enables SQL injection, allowing remote exploitation. The issue is labeled critical with public exploit disclosure. Multiple sources corroborate ...

CVE-2025-0948

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.php. The manipulation of the argument incid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-0947 itsourcecode Tailoring Management System expview.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue is some unknown functionality of the file expview.php. The manipulation of the argument expid leads to sql injection. The attack may be launched remotely. The...

CVE-2025-0947

CVE-2025-0947 affects itsourcecode Tailoring Management System 1.0. Affected component: expview.php; vulnerability: SQL injection via the expid parameter. Remote exploitation is possible, and public exploits have been disclosed. Multiple sources corroborate the issue and indicate a critical risk ...

CVE-2025-0946

CVE-2025-0946 affects itsourcecode Tailoring Management System 1.0. Affected component: the file templatedelete.php, where manipulating the id parameter enables SQL injection. Descriptions consistently state remote exploitation and public disclosure of the exploit. Multiple connected sources conf...

CVE-2025-0945

A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file typedelete.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...