EUVD-2026-91375

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-104606 itsourcecode Online Admission System Project confirm.php sql injection

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-104606 itsourcecode Online Admission System Project confirm.php sql injection

A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the...

CVE-2026-104053 itsourcecode Pet Shop Management System admin_reservefilter.php sql injection

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2026-104053 itsourcecode Pet Shop Management System admin_reservefilter.php sql injection

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

CVE-2025-8971

CVE-2025-8971 SQL 인젝션 작성자: Byte Reaper 설명 : 이 익스플로잇은 itsourcecode Online Tour and Travel Management System 1.0의 SQL 인젝션 취약점인 CVE-2025-8971을 대상으로 합니다. 취약점은 /admin/operations/travellers.php에 존재하며, val-username 매개변수를 통해 원격으로 악용될 수 있습니다. 작동 방식 익스플로잇은 대상 URL에 조작된 HTTP POST 요청을 보냅니다. 페이로드는 인코딩되어...

CVE-2026-103690 itsourcecode Leave Management System controller.php sql injection

A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may be performed from remote. The exploit has been published...

CVE-2026-103690 itsourcecode Leave Management System controller.php sql injection

A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the argument LEAVEID can lead to sql injection. The attack may be performed from remote. The exploit has been published...

CVE-2026-103690

A flaw in itsourcecode Leave Management System 1.0 allows for SQL injection due to insufficient handling of the LEAVEID argument within the /module/leave/controller.php file. This vulnerability can be exploited remotely, and an exploit has been published and may be used. No specific remediation o...

CVE-2026-103543 itsourcecode Leave Management System controller.php sql injection

A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulation of the argument LEAVTID leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

CVE-2024-48415

CVE-2024-48415 설명 itsourcecode Loan Management System v1.0은는 Borrowers 페이지의 신규 대출자new borrowers 기능에서 lastname, firstname, middlename, address, contactno, email 및 taxid 매개변수에 조작된 페이로드를 통해 XSSCross Site Scripting 취약점에 노출됩니다. 취약점 유형: XSSCross Site Scripting 제품 공급업체: itsourcecode 영향을 받는 제품 코드 베이스:...

EUVD-2026-84988

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

CVE-2026-95833

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

CVE-2026-95833: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

CVE-2026-95833 itsourcecode Leave Management System index.php sql injection

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

CVE-2026-95833 itsourcecode Leave Management System index.php sql injection

A weakness has been identified in itsourcecode Leave Management System 1.0. Impacted is an unknown function of the file /module/leavetype/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...

CVE-2026-95833

A SQL injection vulnerability exists in the itsourcecode Leave Management System 1.0 . The flaw is located in an unknown function within the file /module/leavetype/index.php , where a lack of proper input validation on the ID argument allows an attacker to execute arbitrary SQL commands. This vul...

PT-2026-97117

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A remote SQL injection exists in the /module/leavetype/index.php endpoint. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL command...

CVE-2026-94032

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

EUVD-2026-83748

A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown part of the file /module/department/index.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...