itsourcecode Student Information System 安全漏洞

itsourcecode Student Information System is an open source student information system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Student Information System, which stems from an incorrect manipulation of the parameter levelid in the file /leveledit1.php, which...

PT-2025-38223

Name of the Vulnerable Software and Affected Versions: itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description: A security flaw exists in itsourcecode Web-Based Internet Laboratory Management System. Manipulation of the user email argument in the User::AuthenticateUse...

CVE-2025-10615: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in itsourcecode E-Commerce Website 1.0. This impacts an unknown function of the file /admin/products.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used...

CVE-2025-10614: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0 on COVID. This affects an unknown function of the file /printreportsprev.php. Executing manipulation of the argument profileid can lead to cross site scripting. It is possible to launch the...

CVE-2025-10599: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Web-Based Internet Laboratory Management System 1.0. Impacted is the function User::AuthenticateUser of the file login.php. Performing manipulation of the argument useremail results in sql injection. Remote exploitation of the attack is possible...

itsourcecode E-Commerce Website 代码问题漏洞

itsourcecode E-Commerce Website is an open source e-commerce website by itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode E-Commerce Website, which originates from an unlimited upload function in file /admin/users.php, which could lead to a remote attack...

CVE-2025-10426

The CVE-2025-10426 entry concerns itsourcecode Online Laundry Management System 1.0. A SQL injection vulnerability exists in an unknown function of the file /login.php triggered by manipulating the Username argument. The issue is exploitable remotely and exploitation has been publicly released. R...

CVE-2025-10426 itsourcecode Online Laundry Management System login.php sql injection

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

PT-2025-37449

Name of the Vulnerable Software and Affected Versions itsourcecode Online Laundry Management System version 1.0 Description A security flaw has been discovered that allows for SQL injection. Manipulation of the Username argument in an unknown function of the file /login.php can trigger this issue...

itsourcecode Online Laundry Management System SQL注入漏洞

itsourcecode Online Laundry Management System is an online laundry management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Laundry Management System, which stems from an incorrect manipulation of the parameter Username in the fil...

CVE-2025-10426: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

CVE-2025-10411

CVE-2025-10411 affects itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The vulnerability is in the POST Request Handler, where manipulation of the profile_id argument in /stc-log-keeper/check_profile.php enables cross-site scripting. Exploitation can be remote, and public e...

CVE-2025-10411 itsourcecode E-Logbook with Health Monitoring System for COVID-19 POST Request check_profile.php cross site scripting

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site...

CVE-2025-10405 itsourcecode Baptism Information Management System listbaptism.php sql injection

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument baptid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

CVE-2025-10404 itsourcecode Baptism Information Management System rptbaptismal.php sql injection

A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be...

CVE-2025-10404

CVE-2025-10404 affects the open-source-looking product itsourcecode Baptism Information Management System 1.0 . The vulnerability is in the file /rptbaptismal.php where manipulating the ID parameter leads to a SQL injection . Exploitation is described as remote with a publicly available exploit (...

CVE-2025-10411: Improper Neutralization of Input During Web Page Generation

A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/checkprofile.php of the component POST Request Handler. The manipulation of the argument profileid results in cross site...

itsourcecode Baptism Information Management System SQL注入漏洞

itsourcecode Baptism Information Management System is itsourcecode open source information management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Baptism Information Management System, which stems from an incorrect manipulation of the parameter baptid in the file...

CVE-2025-10111

A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/instructor/index.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploi...

CVE-2025-10067

A vulnerability was detected in itsourcecode POS Point of Sale System 1.0. The impacted element is an unknown function of the file /inventory/main/vendors/datatables/unittesting/templates/emptytable.php. Performing manipulation of the argument scripts results in cross site scripting. It is possib...