2155 matches found
PT-2025-36325
Name of the Vulnerable Software and Affected Versions: itsourcecode POS Point of Sale System version 1.0 Description: A cross site scripting issue exists in itsourcecode POS Point of Sale System version 1.0. The vulnerability is located in an unknown functionality of the file...
CVE-2025-9838
A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...
CVE-2025-9839
A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/course/index.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possibl...
CVE-2025-9840 itsourcecode Sports Management System gametype.php sql injection
A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/gametype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been made available...
CVE-2025-9840
The CVE-2025-9840 issue affects itsourcecode Sports Management System version 1.0, specifically the /Admin/gametype.php file. The root cause is an unsafely handled parameter (code) that allows SQL injection, enabling remote exploitation. Public exploits have been reported, and multiple sources de...
CVE-2025-9839 itsourcecode Student Information Management System index.php sql injection
A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/course/index.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possibl...
CVE-2025-9839
The CVE-2025-9839 issue affects itsourcecode Student Information Management System 1.0. Affected component/file: /admin/modules/course/index.php, where manipulating the ID argument leads to an SQL injection. Remote exploitation is possible, and public exploits are reported. Multiple connected sou...
CVE-2025-9838 itsourcecode Student Information Management System index.php sql injection
A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...
CVE-2025-9838 itsourcecode Student Information Management System index.php sql injection
A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...
CVE-2025-9838
CVE-2025-9838 affects itsourcecode Student Information Management System 1.0. The vulnerability is an SQL injection in the unknown function of the file /admin/modules/subject/index.php caused by manipulation of the ID parameter. The issue can be exploited remotely and there are public exploit mat...
CVE-2025-9837 itsourcecode Student Information Management System index.php sql injection
A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules/student/index.php. This manipulation of the argument studentId causes sql injection. The attack may be initiated remotely. The exploit ha...
CVE-2025-9837 itsourcecode Student Information Management System index.php sql injection
A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules/student/index.php. This manipulation of the argument studentId causes sql injection. The attack may be initiated remotely. The exploit ha...
itsourcecode Student Information Management System 安全漏洞
itsourcecode Student Information Management System is itsourcecode open source student information management system. A security vulnerability exists in itsourcecode Student Information Management System version 1.0, which is caused by a SQL injection due to incorrect operation of the parameter...
itsourcecode Student Information Management System 安全漏洞
itsourcecode Student Information Management System is an open source student information management system from itsourcecode. A security vulnerability exists in itsourcecode Student Information Management System version 1.0, which is caused by SQL injection due to incorrect manipulation of the...
itsourcecode Student Information Management System 安全漏洞
itsourcecode Student Information Management System is an open source student information management system from itsourcecode. A security vulnerability exists in itsourcecode Student Information Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the...
CVE-2025-9792 itsourcecode Apartment Management System e_all_info.php sql injection
A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /edashboard/eallinfo.php. Such manipulation of the argument mid leads to sql injection. The attack can be executed remotely. The exploit has been...
CVE-2025-9767 itsourcecode Sports Management System sporttype.php sql injection
A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and m...
CVE-2025-9766 itsourcecode Sports Management System facilitator.php sql injection
A vulnerability was found in itsourcecode Sports Management System 1.0. The impacted element is an unknown function of the file /Admin/facilitator.php. Performing manipulation of the argument code results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...
CVE-2025-9764 itsourcecode Sports Management System resultdetails.php sql injection
A flaw has been found in itsourcecode Sports Management System 1.0. Impacted is an unknown function of the file /Admin/resultdetails.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...
CVE-2025-9764
The CVE-2025-9764 issue affects itsourcecode Sports Management System 1.0, specifically the /Admin/resultdetails.php script where manipulating the ID parameter enables SQL injection. The vulnerability is remotely exploitable and is supported by multiple sources (CNVD/CNNVD references and others) ...