Skip to content
Threat Feed

Vendor

Itsourcecode

11 briefs RSS
high advisory

itsourcecode Courier Management System SQL Injection Vulnerability (CVE-2026-9606)

itsourcecode Courier Management System 1.0 is vulnerable to SQL injection (CVE-2026-9606) via the /manage_user.php file, allowing remote attackers to manipulate the ID argument and potentially execute arbitrary SQL commands.

Courier Management System 1.0 sqli cve-2026-9606 web-application
2r 1t 1c
high advisory

itsourcecode Student Transcript Processing System 1.0 SQL Injection Vulnerability (CVE-2026-9575)

A SQL injection vulnerability exists in itsourcecode Student Transcript Processing System 1.0 in the `/admin/modules/class/index.php?view=view` component; the vulnerability is triggered by manipulating the `ID` argument, potentially enabling remote attackers to execute arbitrary SQL commands.

Student Transcript Processing System 1.0 sql-injection cve web-application
2r 1t 1c
high threat

itsourcecode Student Transcript Processing System SQL Injection Vulnerability (CVE-2026-9574)

itsourcecode Student Transcript Processing System 1.0 is vulnerable to SQL injection via the studentId/cid parameter in the /admin/modules/student/trans.php file, allowing remote attackers to manipulate database queries.

exploited Student Transcript Processing System 1.0 sql-injection cve-2026-9574 itsourcecode web-application
2r 1t 1c
high advisory

itsourcecode Student Transcript Processing System SQL Injection Vulnerability (CVE-2026-9573)

CVE-2026-9573 is a SQL injection vulnerability in itsourcecode Student Transcript Processing System 1.0, allowing a remote attacker to execute arbitrary SQL commands by manipulating the studentId parameter in the /admin/modules/student/index.php?view=view file.

Student Transcript Processing System 1.0 sql injection cve-2026-9573 web application
2r 1t 1c
high advisory

itsourcecode Electronic Judging System 1.0 SQL Injection Vulnerability (CVE-2026-9528)

itsourcecode Electronic Judging System 1.0 is vulnerable to SQL injection via the judge_id parameter in /admin/delete_judge.php, allowing remote attackers to execute arbitrary SQL queries.

Electronic Judging System 1.0 sqli cve-2026-9528 itsourcecode
2r 1t 1c
high advisory

CVE-2026-9526: SQL Injection Vulnerability in itsourcecode Electronic Judging System

A SQL injection vulnerability exists in itsourcecode Electronic Judging System version 1.0, specifically affecting the /admin/edit_team.php file, where an attacker can remotely manipulate the 'num_id' argument to execute arbitrary SQL commands.

Electronic Judging System 1.0 sql-injection cve-2026-9526 web-application
2r 1t 1c
high threat

itsourcecode Electronic Judging System 1.0 SQL Injection Vulnerability (CVE-2026-9525)

A SQL Injection vulnerability exists in itsourcecode Electronic Judging System version 1.0 in the /admin/edit_judge.php file. By manipulating the judge_id argument, an attacker could execute arbitrary SQL commands on the system. The vulnerability can be triggered remotely and has a public exploit available.

Electronic Judging System 1.0 cve sql-injection web-application
2r 1t 1c
high advisory

itsourcecode Electronic Judging System SQL Injection Vulnerability (CVE-2026-9383)

CVE-2026-9383 is a SQL injection vulnerability in itsourcecode Electronic Judging System 1.0, allowing remote attackers to execute arbitrary SQL commands by manipulating the Username parameter in the /intrams/admin/login.php file.

Electronic Judging System 1.0 sql-injection vulnerability web-application
2r 1t 1c
high advisory

SQL Injection Vulnerability in itsourcecode Courier Management System

itsourcecode Courier Management System 1.0 is vulnerable to SQL Injection via the ID parameter in /edit_staff.php, potentially allowing remote attackers to execute arbitrary SQL commands.

Courier Management System sql-injection web-application cve
2r 1t 1c
high advisory

itsourcecode Construction Management System SQL Injection Vulnerability

A SQL injection vulnerability exists in itsourcecode Construction Management System version 1.0, affecting the processing of the /locations.php file, allowing a remote attacker to inject SQL commands by manipulating the 'address' argument, with a publicly available exploit.

Construction Management System 1.0 sql-injection web-application cve-2026-7075
2r 1t 1c
high advisory

itsourcecode Electronic Judging System SQL Injection Vulnerability (CVE-2026-7555)

A remote SQL injection vulnerability (CVE-2026-7555) exists in itsourcecode Electronic Judging System 1.0 via manipulation of the Username argument in the /intrams/login.php file, potentially leading to unauthorized data access and modification.

Electronic Judging System 1.0 sql-injection vulnerability web-application
2r 1t 1c