CVE-2026-123028 itsourcecode Online Book Store admin_edit.php sql injection

A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...

EUVD-2026-117471

A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...

CVE-2026-123028

A SQL injection vulnerability exists in the itsourcecode Online Book Store 1.0 application. The flaw is located within an unknown functionality of the /admin_edit.php file, where the manipulation of the bookisbn argument allows for remote attack initiation. The documents indicate that an exploit ...

CVE-2026-122191 itsourcecode Airline Reservation System manage_booked.php sql injection

A vulnerability was determined in itsourcecode Airline Reservation System 1.0. This affects an unknown function of the file /admin/managebooked.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed...

CVE-2026-122191

The itsourcecode Airline Reservation System 1.0 is vulnerable to an SQL injection vulnerability within the /admin/manage_booked.php file. An attacker can exploit an unknown function by manipulating the ID argument to execute arbitrary SQL commands. This vulnerability can be triggered remotely, an...

CVE-2024-48415

CVE-2024-48415 Description itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the lastname, firstname, middlename, address, contactno, email and taxid parameters in new borrowers functionality on the Borrowers page. Vulnerability Type: Cros...

CVE-2025-8971

CVE-2025-8971 SQL Injection Author: Byte Reaper Description : This exploit for CVE-2025-8971, a SQL injection vulnerability in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability exists in /admin/operations/travellers.php and can be exploited remotely via the val-username...

CVE-2026-116515

The itsourcecode Online Book Store 1.0 application is vulnerable to SQL injection within the /book.php file. The vulnerability is triggered by the manipulation of the bookisbn argument. This flaw can be exploited remotely, and an exploit has been disclosed publicly. No specific remediation or ver...

CVE-2026-116515 itsourcecode Online Book Store book.php sql injection

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

CVE-2026-116515 itsourcecode Online Book Store book.php sql injection

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

CVE-2026-116514 itsourcecode Airline Reservation System book_flight.php cross site scripting

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /bookflight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the...

CVE-2026-116514 itsourcecode Airline Reservation System book_flight.php cross site scripting

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /bookflight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the...

CVE-2026-116514

The itsourcecode Airline Reservation System 1.0 is vulnerable to a cross-site scripting (XSS) vulnerability within the /book_flight.php file. The root cause involves a failure to properly neutralize the max argument, allowing for remote execution of the attack. Public exploits are available, and ...

CVE-2026-116101 itsourcecode Online Cake Ordering System deletetransac.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could ...

CVE-2026-116101

The itsourcecode Online Cake Ordering System 1.0 is vulnerable to an SQL injection flaw within an unknown function in the /deletetransac.php file. An attacker can exploit this by manipulating the ID argument, which may be performed remotely. The documentation indicates that an exploit has been ma...

CVE-2026-116101 itsourcecode Online Cake Ordering System deletetransac.php sql injection

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /deletetransac.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could ...

itsourcecode Airline Reservation System Cross-site Scripting Vulnerability

Version 1.0 of itsourcecode Airline Reservation System contains a security vulnerability stemming from improper handling of the ‘max’ parameter in the /bookflight.php file, which may lead to cross-site scripting attacks...

itsourcecode Online Book Store input validation error vulnerability

The 1.0 version of itsourcecode Online Book Store contains a security vulnerability stemming from improper handling of the bookisbn parameter in the /book.php file, which may lead to SQL injection...

PT-2026-125498

A security vulnerability has been detected in itsourcecode Online Book Store 1.0. This vulnerability affects unknown code of the file /book.php. The manipulation of the argument bookisbn leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed...

CVE-2026-114384 itsourcecode Online Cake Ordering System transactionsave.php sql injection

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly...