Itsourcecode Content Management System security vulnerabilities

itsourcecode Content Management System is an open source content management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Content Management System, which originates from an improper operation of the parameter Cover Image in the file /admin/addtopic.php,...

Itsourcecode Gym Management System security vulnerabilities

itsourcecode Gym Management System is an open source gym management system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Gym Management System, which is caused by an SQL injection due to misuse of the parameter rid in file/ajax.php...

PT-2025-19830 · Unknown · Itsourcecode Content Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Content Management System version 1.0 Description: A critical issue was discovered in the itsourcecode Content Management System, affecting the /admin/update main topic img.php file. The manipulation of the topic id argument lead...

PT-2025-19948

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical vulnerability was found in the itsourcecode Gym Management System. The issue affects an unknown functionality of the file /ajax.php?action=delete member. The manipulation of...

CVE-2025-4310: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in itsourcecode Content Management System 1.0. This affects an unknown part of the file /admin/addtopic.php?category=BBS. The manipulation of the argument Cover Image leads to unrestricted upload. It is possible to initiate the attack remotely...

CVE-2025-4301: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in itsourcecode Content Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search-notice.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

Itsourcecode Content Management System security vulnerabilities

itsourcecode Content Management System is an open source content management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Content Management System, which is caused by an SQL injection due to the manipulation of the searchdata parameter in file...

Itsourcecode Content Management System security vulnerabilities

itsourcecode Content Management System is an open source content management system from itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Content Management System, which is caused by a SQL injection attack due to an incorrect manipulation of the Search parameter in the...

CVE-2025-4193

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categoryupdate.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely...

CVE-2025-4193

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categoryupdate.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely...

CVE-2025-4192

A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/categorysave.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-4195 itsourcecode Gym Management System ajax.php sql injection

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /ajax.php?action=savemember. The manipulation of the argument umemberid leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-4193 itsourcecode Restaurant Management System category_update.php sql injection

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categoryupdate.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely...

CVE-2025-4193

CVE-2025-4193 affects itsourcecode Restaurant Management System 1.0. The vulnerability resides in the admin/category_update.php logic, where manipulating the Category parameter enables an SQL injection. It is described as exploitable remotely, with public disclosure of the exploit. Multiple sourc...

CVE-2025-4192 itsourcecode Restaurant Management System category_save.php sql injection

A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/categorysave.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-4192

This CVE (CVE-2025-4192) affects itsourcecode Restaurant Management System 1.0. The vulnerability is a SQL injection in the /admin/category_save.php file, caused by manipulation of the Category parameter. It is exploitable remotely and exploitation has been disclosed publicly. The available docum...

CVE-2025-4193: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categoryupdate.php. The manipulation of the argument Category leads to sql injection. The attack may be launched remotely...

CVE-2025-4192: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/categorysave.php. The manipulation of the argument Category leads to sql injection. It is possible to initiate the attack remotely. The...

Itsourcecode Restaurant Management System security vulnerabilities

itsourcecode Restaurant Management System is an itsourcecode open source restaurant management system. A security vulnerability exists in version 1.0 of itsourcecode Restaurant Management System, which is caused by a SQL injection due to incorrect manipulation of the parameter Category in the fil...

Itsourcecode Gym Management System security vulnerabilities

itsourcecode Gym Management System is an open source gym management system by itsourcecode. A security vulnerability exists in itsourcecode Gym Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the umemberid parameter in...