Vendor
ItsourceCode
692 known vulnerabilities in products by ItsourceCode, 0 of them actively exploited (CISA KEV).
Key figures
692
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
355
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| High | CVE-2026-81202 | itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication | 7.3 | |
| Critical | CVE-2026-36234 | Online Student Enrollment System: SQL Injection | 9.8 | |
| Critical | CVE-2026-36232 | Online Student Enrollment System: SQL Injection | 9.8 | |
| Critical | CVE-2026-36233 | Online Student Enrollment System: SQL Injection | 9.8 | |
| Critical | CVE-2026-36235 | Online Student Enrollment System: SQL Injection | 9.8 | |
| High | CVE-2026-82611 | ItsourceCode Online Medicine Delivery System: SQL Injection | 7.3 | |
| High | CVE-2026-82610 | itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection | 7.3 | |
| Critical | CVE-2024-37849 | Billing System: SQL Injection | 9.8 | |
| High | CVE-2026-85208 | ItsourceCode Online Medicine Delivery System: Unrestricted Upload of File with Dangerous Type | 7.3 | |
| Critical | CVE-2025-4464 | itsourcecode Gym Management System ajax.php sql injection | 7.3 | |
| Critical | CVE-2025-4466 | itsourcecode Gym Management System ajax.php sql injection | 7.3 | |
| Critical | CVE-2025-4465 | itsourcecode Gym Management System ajax.php sql injection | 7.3 | |
| Critical | CVE-2025-4463 | itsourcecode Gym Management System ajax.php sql injection | 7.3 | |
| Critical | CVE-2024-37873 | ItsourceCode Payroll Management System Project In PHP With Source Code: SQL Injection | 9.8 | |
| High | CVE-2026-78245 | ItsourceCode Online Pharmacy System: Unrestricted Upload of File with Dangerous Type | 7.3 | |
| High | CVE-2026-78202 | itsourcecode Payroll System admin_class.php save_settings unrestricted upload | 7.3 | |
| High | CVE-2026-90789 | itsourcecode Leave Management System login.php sql injection | 7.3 | |
| High | CVE-2026-86268 | itsourcecode School Management System User_Login.php sql injection | 7.3 | |
| High | CVE-2026-85187 | ItsourceCode Online Medicine Delivery System: SQL Injection | 7.3 | |
| Critical | CVE-2025-0944 | itsourcecode Tailoring Management System customerview.php sql injection | 6.3 | |
| High | CVE-2026-82615 | ItsourceCode Online Medicine Delivery System: SQL Injection | 7.3 | |
| High | CVE-2026-82613 | itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection | 7.3 | |
| High | CVE-2026-82612 | itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection | 7.3 | |
| High | CVE-2026-82614 | ItsourceCode Online Medicine Delivery System: SQL Injection | 7.3 | |
| Critical | CVE-2026-3133 | itsourcecode Document Management System Login loging.php sql injection | 7.3 |