# cve.now: Itsourcecode The newest entries naming Itsourcecode as an affected vendor (up to 200), of 695 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-124581](https://cve.now/CVE-2026-124581.md): itsourcecode Airline Reservation System manage\_flight.php sql injection (CVSS 6.9) - [CVE-2026-123028](https://cve.now/CVE-2026-123028.md): itsourcecode Online Book Store admin\_edit.php sql injection (CVSS 6.9) - [CVE-2026-122191](https://cve.now/CVE-2026-122191.md): itsourcecode Airline Reservation System manage\_booked.php sql injection (CVSS 5.3) - [CVE-2026-116515](https://cve.now/CVE-2026-116515.md): itsourcecode Online Book Store book.php sql injection (CVSS 5.3) - [CVE-2026-116514](https://cve.now/CVE-2026-116514.md): itsourcecode Airline Reservation System book\_flight.php cross site scripting (CVSS 5.3) - [CVE-2026-116101](https://cve.now/CVE-2026-116101.md): itsourcecode Online Cake Ordering System deletetransac.php sql injection (CVSS 5.3) - [CVE-2026-114384](https://cve.now/CVE-2026-114384.md): itsourcecode Online Cake Ordering System transactionsave.php sql injection (CVSS 5.3) - [CVE-2026-114381](https://cve.now/CVE-2026-114381.md): itsourcecode Online Cake Ordering System orderdetail.php sql injection (CVSS 5.3) - [CVE-2026-114380](https://cve.now/CVE-2026-114380.md): itsourcecode Online Cake Ordering System inserttrans.php sql injection (CVSS 5.3) - [CVE-2026-114378](https://cve.now/CVE-2026-114378.md): itsourcecode Online Cake Ordering System deleteproduct.php sql injection (CVSS 5.3) - [CVE-2026-114252](https://cve.now/CVE-2026-114252.md): itsourcecode Sales-and-Inventory-System cust\_searchfrm.php sql injection (CVSS 5.3) - [CVE-2026-114251](https://cve.now/CVE-2026-114251.md): itsourcecode Sales-and-Inventory-System cust\_del.php sql injection (CVSS 5.3) - [CVE-2026-114250](https://cve.now/CVE-2026-114250.md): itsourcecode Sales-and-Inventory-System cust\_edit.php sql injection (CVSS 5.3) - [CVE-2026-113741](https://cve.now/CVE-2026-113741.md): itsourcecode Online Cake Ordering System 404.php cross site scripting (CVSS 5.3) - [CVE-2026-113740](https://cve.now/CVE-2026-113740.md): itsourcecode Online Cake Ordering System deletecustomer.php sql injection (CVSS 5.3) - [CVE-2026-112087](https://cve.now/CVE-2026-112087.md): itsourcecode Online Cake Ordering System confirm.php sql injection (CVSS 5.3) - [CVE-2026-108959](https://cve.now/CVE-2026-108959.md): itsourcecode Online Cake Ordering System addtransacdetail.php sql injection (CVSS 5.3) - [CVE-2026-108928](https://cve.now/CVE-2026-108928.md): itsourcecode Online Admission System sum.php sql injection (CVSS 5.3) - [CVE-2026-108927](https://cve.now/CVE-2026-108927.md): itsourcecode Baptism Information Management System pbaptism.php sql injection (CVSS 5.3) - [CVE-2026-108926](https://cve.now/CVE-2026-108926.md): itsourcecode Baptism Information Management System ebaptism.php sql injection (CVSS 5.3) - [CVE-2026-105254](https://cve.now/CVE-2026-105254.md): itsourcecode Online Admission System schoolyear.php sql injection (CVSS 5.3) - [CVE-2026-105253](https://cve.now/CVE-2026-105253.md): itsourcecode Online Admission System Project login1.php sql injection (CVSS 6.9) - [CVE-2026-105187](https://cve.now/CVE-2026-105187.md): itsourcecode Online Admission System key.php sql injection (CVSS 5.3) - [CVE-2026-105186](https://cve.now/CVE-2026-105186.md): itsourcecode Online Admission System new.php sql injection (CVSS 5.3) - [CVE-2026-105185](https://cve.now/CVE-2026-105185.md): itsourcecode Online Admission System examinee.php sql injection (CVSS 6.9) - [CVE-2026-105184](https://cve.now/CVE-2026-105184.md): itsourcecode Online Admission System creteria.php sql injection (CVSS 6.9) - [CVE-2026-105183](https://cve.now/CVE-2026-105183.md): itsourcecode Online Admission System confirm.php sql injection (CVSS 6.9) - [CVE-2026-105181](https://cve.now/CVE-2026-105181.md): itsourcecode Online Admission System register1.php sql injection (CVSS 5.3) - [CVE-2026-105172](https://cve.now/CVE-2026-105172.md): itsourcecode Online Admission System login1.php sql injection (CVSS 6.9) - [CVE-2026-104606](https://cve.now/CVE-2026-104606.md): itsourcecode Online Admission System Project confirm.php sql injection (CVSS 5.3) - [CVE-2026-104053](https://cve.now/CVE-2026-104053.md): itsourcecode Pet Shop Management System admin\_reservefilter.php sql injection (CVSS 5.3) - [CVE-2026-104052](https://cve.now/CVE-2026-104052.md): itsourcecode Pet Shop Management System admin\_reject\_completed.php sql injection (CVSS 5.3) - [CVE-2026-103690](https://cve.now/CVE-2026-103690.md): itsourcecode Leave Management System controller.php sql injection (CVSS 5.3) - [CVE-2026-103543](https://cve.now/CVE-2026-103543.md): itsourcecode Leave Management System controller.php sql injection (CVSS 5.3) - [CVE-2026-95833](https://cve.now/CVE-2026-95833.md): itsourcecode Leave Management System index.php sql injection (CVSS 5.3) - [CVE-2026-94032](https://cve.now/CVE-2026-94032.md): itsourcecode Leave Management System index.php sql injection (CVSS 5.3) - [CVE-2026-93963](https://cve.now/CVE-2026-93963.md): itsourcecode Leave Management System controller.php sql injection (CVSS 5.3) - [CVE-2026-92526](https://cve.now/CVE-2026-92526.md): itsourcecode Leave Management System index.php sql injection (CVSS 5.3) - [CVE-2026-92364](https://cve.now/CVE-2026-92364.md): itsourcecode Leave Management System index.php sql injection (CVSS 5.3) - [CVE-2026-90796](https://cve.now/CVE-2026-90796.md): itsourcecode Leave Management System index.php sql injection (CVSS 5.3) - [CVE-2026-90795](https://cve.now/CVE-2026-90795.md): itsourcecode Loan Management System navbar.php cross site scripting (CVSS 5.3) - [CVE-2026-90789](https://cve.now/CVE-2026-90789.md): itsourcecode Leave Management System login.php sql injection (CVSS 6.9) - [CVE-2026-90700](https://cve.now/CVE-2026-90700.md): itsourcecode Sales and Inventory System pro\_edit1.php sql injection (CVSS 5.3) - [CVE-2026-90600](https://cve.now/CVE-2026-90600.md): itsourcecode Sales and Inventory System inv\_edit1.php sql injection (CVSS 5.3) - [CVE-2026-90597](https://cve.now/CVE-2026-90597.md): itsourcecode Sales and Inventory System sup\_edit1.php sql injection (CVSS 5.3) - [CVE-2026-90574](https://cve.now/CVE-2026-90574.md): itsourcecode Sales and Inventory System emp\_transac.php add sql injection (CVSS 5.3) - [CVE-2026-90525](https://cve.now/CVE-2026-90525.md): itsourcecode Sales and Inventory System cust\_pos\_trans.php sql injection (CVSS 5.3) - [CVE-2026-86675](https://cve.now/CVE-2026-86675.md): itsourcecode Sales and Inventory System us\_edit.php sql injection (CVSS 5.3) - [CVE-2026-86517](https://cve.now/CVE-2026-86517.md): itsourcecode Sales and Inventory System us\_searchfrm.php mysqli\_query sql injection (CVSS 5.3) - [CVE-2026-86310](https://cve.now/CVE-2026-86310.md): itsourcecode Sales and Inventory System cust\_edit1.php sql injection (CVSS 5.3) - [CVE-2026-86309](https://cve.now/CVE-2026-86309.md): itsourcecode Sales and Inventory System pro\_searchfrm.php sql injection (CVSS 5.3) - [CVE-2026-86291](https://cve.now/CVE-2026-86291.md): itsourcecode Sales and Inventory System us\_edit1.php sql injection (CVSS 5.3) - [CVE-2026-86270](https://cve.now/CVE-2026-86270.md): itsourcecode Sales and Inventory System settings\_edit.php sql injection (CVSS 5.3) - [CVE-2026-86269](https://cve.now/CVE-2026-86269.md): itsourcecode Sales and Inventory System emp\_edit1.php sql injection (CVSS 5.3) - [CVE-2026-86268](https://cve.now/CVE-2026-86268.md): itsourcecode School Management System User\_Login.php sql injection (CVSS 6.9) - [CVE-2026-86267](https://cve.now/CVE-2026-86267.md): itsourcecode Information System Society Membership System check\_student.php sql injection (CVSS 5.3) - [CVE-2026-86265](https://cve.now/CVE-2026-86265.md): itsourcecode Sales and Inventory System us\_transac.php sql injection (CVSS 5.3) - [CVE-2026-86245](https://cve.now/CVE-2026-86245.md): itsourcecode Sales and Inventory System sup\_transac.php sql injection (CVSS 5.3) - [CVE-2026-86236](https://cve.now/CVE-2026-86236.md): itsourcecode Sales and Inventory System pro\_transac.php add sql injection (CVSS 5.3) - [CVE-2026-86235](https://cve.now/CVE-2026-86235.md): itsourcecode Sales and Inventory System pos\_transac.php add sql injection (CVSS 5.3) - [CVE-2026-86234](https://cve.now/CVE-2026-86234.md): itsourcecode Sales and Inventory System cust\_transac.php add sql injection (CVSS 5.3) - [CVE-2026-86233](https://cve.now/CVE-2026-86233.md): itsourcecode Sales and Inventory System us\_del.php sql injection (CVSS 5.3) - [CVE-2026-86232](https://cve.now/CVE-2026-86232.md): itsourcecode Sales and Inventory System sup\_del.php sql injection (CVSS 5.3) - [CVE-2026-86164](https://cve.now/CVE-2026-86164.md): itsourcecode Sales and Inventory System trans\_view.php sql injection (CVSS 5.3) - [CVE-2026-86163](https://cve.now/CVE-2026-86163.md): itsourcecode Sales and Inventory System pro\_del.php sql injection (CVSS 5.3) - [CVE-2026-85383](https://cve.now/CVE-2026-85383.md): itsourcecode Sales and Inventory System inv\_del.php sql injection (CVSS 5.3) - [CVE-2026-85208](https://cve.now/CVE-2026-85208.md): itsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted upload (CVSS 6.9) - [CVE-2026-85207](https://cve.now/CVE-2026-85207.md): itsourcecode Online Medicine Delivery System index.php cross site scripting (CVSS 5.1) - [CVE-2026-85205](https://cve.now/CVE-2026-85205.md): itsourcecode Online Medicine Delivery System Wishlist controller.php addwishlist sql injection (CVSS 5.3) - [CVE-2026-85187](https://cve.now/CVE-2026-85187.md): itsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injection (CVSS 6.9) - [CVE-2026-85186](https://cve.now/CVE-2026-85186.md): itsourcecode Online Medicine Delivery System Customer Controller controller.php doupdateimage unrestricted upload (CVSS 5.3) - [CVE-2026-82696](https://cve.now/CVE-2026-82696.md): itsourcecode Sales and Inventory System inv\_searchfrm.php sql injection (CVSS 5.3) - [CVE-2026-82615](https://cve.now/CVE-2026-82615.md): itsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find\_phone sql injection (CVSS 6.9) - [CVE-2026-82614](https://cve.now/CVE-2026-82614.md): itsourcecode Online Medicine Delivery System Product Category Filter index.php loadResultList sql injection (CVSS 6.9) - [CVE-2026-82613](https://cve.now/CVE-2026-82613.md): itsourcecode Online Medicine Delivery System Product Search index.php loadResultList sql injection (CVSS 6.9) - [CVE-2026-82612](https://cve.now/CVE-2026-82612.md): itsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injection (CVSS 6.9) - [CVE-2026-82611](https://cve.now/CVE-2026-82611.md): itsourcecode Online Medicine Delivery System Customer Login login.php cusAuthentication sql injection (CVSS 6.9) - [CVE-2026-82610](https://cve.now/CVE-2026-82610.md): itsourcecode Online Medicine Delivery System Login login.php employeeAuthentication sql injection (CVSS 6.9) - [CVE-2026-82609](https://cve.now/CVE-2026-82609.md): itsourcecode Sales and Inventory System inv\_edit.php sql injection (CVSS 5.3) - [CVE-2026-82545](https://cve.now/CVE-2026-82545.md): itsourcecode Sales and Inventory System sup\_searchfrm.php sql injection (CVSS 5.3) - [CVE-2026-82541](https://cve.now/CVE-2026-82541.md): itsourcecode Sales and Inventory System sup\_edit.php sql injection (CVSS 5.3) - [CVE-2026-82540](https://cve.now/CVE-2026-82540.md): itsourcecode Sales and Inventory System cust\_searchfrm.php sql injection (CVSS 5.3) - [CVE-2026-82485](https://cve.now/CVE-2026-82485.md): itsourcecode Sales and Inventory System pro\_edit.php sql injection (CVSS 5.3) - [CVE-2026-82484](https://cve.now/CVE-2026-82484.md): itsourcecode Sales and Inventory System emp\_searchfrm.php sql injection (CVSS 5.3) - [CVE-2026-82422](https://cve.now/CVE-2026-82422.md): itsourcecode Sales and Inventory System emp\_del.php sql injection (CVSS 5.3) - [CVE-2026-82421](https://cve.now/CVE-2026-82421.md): itsourcecode Sales and Inventory System emp\_edit.php sql injection (CVSS 5.3) - [CVE-2026-81202](https://cve.now/CVE-2026-81202.md): itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication (CVSS 6.9) - [CVE-2026-78656](https://cve.now/CVE-2026-78656.md): itsourcecode Sales and Inventory System cust\_del.php sql injection (CVSS 5.3) - [CVE-2026-78246](https://cve.now/CVE-2026-78246.md): itsourcecode Online Clinic Management System Admin Login login.php sql injection (CVSS 6.9) - [CVE-2026-78245](https://cve.now/CVE-2026-78245.md): itsourcecode Online Pharmacy System User Registration register.php move\_uploaded\_file unrestricted upload (CVSS 6.9) - [CVE-2026-78244](https://cve.now/CVE-2026-78244.md): itsourcecode Real Estate Management System search.php sql injection (CVSS 6.9) - [CVE-2026-78202](https://cve.now/CVE-2026-78202.md): itsourcecode Payroll System admin\_class.php save\_settings unrestricted upload (CVSS 6.9) - [CVE-2026-78201](https://cve.now/CVE-2026-78201.md): itsourcecode Payroll System admin\_class.php login sql injection (CVSS 6.9) - [CVE-2026-78200](https://cve.now/CVE-2026-78200.md): itsourcecode Library Management System editbooks.php sql injection (CVSS 5.3) - [CVE-2026-78185](https://cve.now/CVE-2026-78185.md): itsourcecode Sales and Inventory System cust\_edit.php sql injection (CVSS 5.3) - [CVE-2026-78171](https://cve.now/CVE-2026-78171.md): itsourcecode Sales and Inventory System processlogin.php sql injection (CVSS 6.9) - [CVE-2026-78112](https://cve.now/CVE-2026-78112.md): itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection (CVSS 5.3) - [CVE-2026-77025](https://cve.now/CVE-2026-77025.md): itsourcecode Hospital Management System viewappointmentpending.php sql injection (CVSS 5.3) - [CVE-2026-76991](https://cve.now/CVE-2026-76991.md): itsourcecode Hospital Management System viewappointmentapproved.php sql injection (CVSS 5.3) - [CVE-2026-75088](https://cve.now/CVE-2026-75088.md): itsourcecode Hospital Management System viewbilling.php sql injection (CVSS 5.3) - [CVE-2026-75087](https://cve.now/CVE-2026-75087.md): itsourcecode Hospital Management System viewdepartment.php sql injection (CVSS 5.3) - [CVE-2026-75086](https://cve.now/CVE-2026-75086.md): itsourcecode Hospital Management System viewroom.php sql injection (CVSS 5.3) - [CVE-2026-20000](https://cve.now/CVE-2026-20000.md): itsourcecode Hospital Management System viewprescriptionrecord.php sql injection (CVSS 5.3) - [CVE-2026-19973](https://cve.now/CVE-2026-19973.md): itsourcecode Hospital Management System viewpaymentreport.php sql injection (CVSS 5.3) - [CVE-2026-19972](https://cve.now/CVE-2026-19972.md): itsourcecode Hospital Management System viewpatient.php sql injection (CVSS 5.3) - [CVE-2026-19934](https://cve.now/CVE-2026-19934.md): itsourcecode Hospital Management System vieworder.php sql injection (CVSS 5.3) - [CVE-2026-19894](https://cve.now/CVE-2026-19894.md): itsourcecode Hospital Management System viewmedicine.php sql injection (CVSS 5.3) - [CVE-2026-19767](https://cve.now/CVE-2026-19767.md): itsourcecode Hospital Management System viewdoctortimings.php sql injection (CVSS 5.3) - [CVE-2026-19364](https://cve.now/CVE-2026-19364.md): itsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injection (CVSS 5.3) - [CVE-2026-19347](https://cve.now/CVE-2026-19347.md): itsourcecode Hospital Management System viewdoctor.php sql injection (CVSS 5.3) - [CVE-2026-19071](https://cve.now/CVE-2026-19071.md): itsourcecode Hospital Management System viewappointment.php sql injection (CVSS 5.3) - [CVE-2026-19070](https://cve.now/CVE-2026-19070.md): itsourcecode Hospital Management System viewadmin.php sql injection (CVSS 5.3) - [CVE-2026-19069](https://cve.now/CVE-2026-19069.md): itsourcecode Hospital Management System treatmentrecord.php sql injection (CVSS 5.3) - [CVE-2026-19068](https://cve.now/CVE-2026-19068.md): itsourcecode Hospital Management System treatmentdetail.php sql injection (CVSS 5.3) - [CVE-2026-19067](https://cve.now/CVE-2026-19067.md): itsourcecode Hospital Management System treatment.php sql injection (CVSS 5.3) - [CVE-2026-19020](https://cve.now/CVE-2026-19020.md): itsourcecode Hospital Management System servicetype.php sql injection (CVSS 5.3) - [CVE-2026-16490](https://cve.now/CVE-2026-16490.md): itsourcecode Hospital Management System prescription.php sql injection (CVSS 5.3) - [CVE-2026-16334](https://cve.now/CVE-2026-16334.md): itsourcecode Hospital Management System prescriptionorder.php sql injection (CVSS 5.3) - [CVE-2026-16244](https://cve.now/CVE-2026-16244.md): itsourcecode Hospital Management System prescriptionorderreport.php sql injection (CVSS 5.3) - [CVE-2026-16229](https://cve.now/CVE-2026-16229.md): itsourcecode Courier Management System index.php cross site scripting (CVSS 5.3) - [CVE-2026-16131](https://cve.now/CVE-2026-16131.md): itsourcecode Hospital Management System prescriptionrecord.php sql injection (CVSS 5.3) - [CVE-2026-16009](https://cve.now/CVE-2026-16009.md): itsourcecode Hospital Management System prescriptionorderdetail.php sql injection (CVSS 5.3) - [CVE-2026-15672](https://cve.now/CVE-2026-15672.md): itsourcecode Electronic Judging System add\_judges.php sql injection (CVSS 5.3) - [CVE-2026-15536](https://cve.now/CVE-2026-15536.md): itsourcecode Hospital Management System patviewprescription.php sql injection (CVSS 5.3) - [CVE-2026-14774](https://cve.now/CVE-2026-14774.md): itsourcecode Hospital Management System paymentdischarge.php sql injection (CVSS 5.3) - [CVE-2026-14773](https://cve.now/CVE-2026-14773.md): itsourcecode Hospital Management System payment.php sql injection (CVSS 5.3) - [CVE-2026-14731](https://cve.now/CVE-2026-14731.md): itsourcecode Hospital Management System patientreport.php sql injection (CVSS 5.3) - [CVE-2026-14730](https://cve.now/CVE-2026-14730.md): itsourcecode Hospital Management System patientprofile.php sql injection (CVSS 5.3) - [CVE-2026-14717](https://cve.now/CVE-2026-14717.md): itsourcecode Hospital Management System patientlogin.php sql injection (CVSS 5.3) - [CVE-2026-14703](https://cve.now/CVE-2026-14703.md): itsourcecode Hospital Management System patientorder.php sql injection (CVSS 5.3) - [CVE-2026-14688](https://cve.now/CVE-2026-14688.md): itsourcecode Online Hotel Management System login.php sql injection (CVSS 6.9) - [CVE-2026-14659](https://cve.now/CVE-2026-14659.md): itsourcecode Hospital Management System patientappointment.php sql injection (CVSS 5.3) - [CVE-2026-14638](https://cve.now/CVE-2026-14638.md): itsourcecode Hospital Management System patient.php sql injection (CVSS 5.3) - [CVE-2026-14619](https://cve.now/CVE-2026-14619.md): itsourcecode Hospital Management System medicine.php sql injection (CVSS 5.3) - [CVE-2026-13579](https://cve.now/CVE-2026-13579.md): itsourcecode Hospital Management System patientchangepassword.php sql injection (CVSS 5.3) - [CVE-2026-13578](https://cve.now/CVE-2026-13578.md): itsourcecode Hospital Management System patientdetail.php sql injection (CVSS 5.3) - [CVE-2026-13572](https://cve.now/CVE-2026-13572.md): itsourcecode Hospital Management System insertbillingrecord.php sql injection (CVSS 5.3) - [CVE-2026-13557](https://cve.now/CVE-2026-13557.md): itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting (CVSS 5.3) - [CVE-2026-13556](https://cve.now/CVE-2026-13556.md): itsourcecode Online Hotel Management System POST Request controller.php edit cross site scripting (CVSS 5.3) - [CVE-2026-13555](https://cve.now/CVE-2026-13555.md): itsourcecode Online Hotel Management System controller.php add sql injection (CVSS 6.9) - [CVE-2026-13554](https://cve.now/CVE-2026-13554.md): itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting (CVSS 5.3) - [CVE-2026-13553](https://cve.now/CVE-2026-13553.md): itsourcecode Online Hotel Management System controller.php add unrestricted upload (CVSS 6.9) - [CVE-2026-13552](https://cve.now/CVE-2026-13552.md): itsourcecode Online Hotel Management System controller.php edit sql injection (CVSS 6.9) - [CVE-2026-13551](https://cve.now/CVE-2026-13551.md): itsourcecode Baptism Information Management System editBaptism.php sql injection (CVSS 6.9) - [CVE-2026-13550](https://cve.now/CVE-2026-13550.md): itsourcecode Baptism Information Management System delbaptism.php sql injection (CVSS 6.9) - [CVE-2026-13548](https://cve.now/CVE-2026-13548.md): itsourcecode Hospital Management System doctortimings.php sql injection (CVSS 5.3) - [CVE-2026-13542](https://cve.now/CVE-2026-13542.md): itsourcecode Hospital Management System doctorprofile.php sql injection (CVSS 5.3) - [CVE-2026-13541](https://cve.now/CVE-2026-13541.md): itsourcecode Hospital Management System doctorchangepassword.php sql injection (CVSS 5.3) - [CVE-2026-13532](https://cve.now/CVE-2026-13532.md): itsourcecode Hospital Management System departmentDoctor.php sql injection (CVSS 5.3) - [CVE-2026-13531](https://cve.now/CVE-2026-13531.md): itsourcecode Hospital Management System department.php sql injection (CVSS 5.3) - [CVE-2026-13530](https://cve.now/CVE-2026-13530.md): itsourcecode Hospital Management System Appointment appointmentdetail.php sql injection (CVSS 5.3) - [CVE-2026-13520](https://cve.now/CVE-2026-13520.md): itsourcecode Hospital Management System Appointment appointmentapproval.php sql injection (CVSS 5.3) - [CVE-2026-13497](https://cve.now/CVE-2026-13497.md): itsourcecode Hospital Management System appointment.php sql injection (CVSS 5.3) - [CVE-2026-13496](https://cve.now/CVE-2026-13496.md): itsourcecode Hospital Management System ajaxmedicine.php sql injection (CVSS 5.3) - [CVE-2026-13495](https://cve.now/CVE-2026-13495.md): itsourcecode Hospital Management System adminprofile.php sql injection (CVSS 5.1) - [CVE-2026-11514](https://cve.now/CVE-2026-11514.md): itsourcecode Hospital Management System addpatient.php sql injection (CVSS 5.3) - [CVE-2026-11513](https://cve.now/CVE-2026-11513.md): itsourcecode Hospital Management System adminaccount.php sql injection (CVSS 5.3) - [CVE-2026-11512](https://cve.now/CVE-2026-11512.md): itsourcecode Hospital Management System billing.php cross site scripting (CVSS 5.3) - [CVE-2026-10811](https://cve.now/CVE-2026-10811.md): itsourcecode Fees Management System receipt.php sql injection (CVSS 5.3) - [CVE-2026-10810](https://cve.now/CVE-2026-10810.md): itsourcecode Fees Management System navbar.php cross site scripting (CVSS 5.3) - [CVE-2026-10809](https://cve.now/CVE-2026-10809.md): itsourcecode Fees Management System manage\_user.php sql injection (CVSS 5.3) - [CVE-2026-10808](https://cve.now/CVE-2026-10808.md): itsourcecode Fees Management System manage\_student.php sql injection (CVSS 5.3) - [CVE-2026-10568](https://cve.now/CVE-2026-10568.md): itsourcecode Fees Management System manage\_payment.php sql injection (CVSS 5.3) - [CVE-2026-10302](https://cve.now/CVE-2026-10302.md): itsourcecode Fees Management System manage\_fee.php sql injection (CVSS 5.3) - [CVE-2026-10301](https://cve.now/CVE-2026-10301.md): itsourcecode Fees Management System index.php cross site scripting (CVSS 5.3) - [CVE-2026-10297](https://cve.now/CVE-2026-10297.md): itsourcecode Fees Management System manage\_course.php sql injection (CVSS 5.3) - [CVE-2026-10296](https://cve.now/CVE-2026-10296.md): itsourcecode Fees Management System ajax.php sql injection (CVSS 5.3) - [CVE-2026-10265](https://cve.now/CVE-2026-10265.md): itsourcecode Content Management System edit\_topic.php sql injection (CVSS 5.3) - [CVE-2026-10258](https://cve.now/CVE-2026-10258.md): itsourcecode Content Management System add\_sub\_topic.php sql injection (CVSS 5.3) - [CVE-2026-10257](https://cve.now/CVE-2026-10257.md): itsourcecode Content Management System update\_ss\_img.php sql injection (CVSS 5.3) - [CVE-2026-10256](https://cve.now/CVE-2026-10256.md): itsourcecode Content Management System save\_comment.php sql injection (CVSS 5.3) - [CVE-2026-10253](https://cve.now/CVE-2026-10253.md): itsourcecode Online House Rental System manage\_payment.php sql injection (CVSS 6.9) - [CVE-2026-10252](https://cve.now/CVE-2026-10252.md): itsourcecode Online House Rental System manage\_tenant.php sql injection (CVSS 6.9) - [CVE-2026-10251](https://cve.now/CVE-2026-10251.md): itsourcecode Online House Rental System ajax.php login sql injection (CVSS 6.9) - [CVE-2026-10250](https://cve.now/CVE-2026-10250.md): itsourcecode Online Blood Bank Management System campsdetails.php sql injection (CVSS 6.9) - [CVE-2026-10249](https://cve.now/CVE-2026-10249.md): itsourcecode Online Blood Bank Management System viewrequest.php sql injection (CVSS 6.9) - [CVE-2026-10242](https://cve.now/CVE-2026-10242.md): itsourcecode Content Management System instructions.php sql injection (CVSS 5.3) - [CVE-2026-9607](https://cve.now/CVE-2026-9607.md): itsourcecode Courier Management System parcel\_list.php sql injection (CVSS 5.3) - [CVE-2026-9606](https://cve.now/CVE-2026-9606.md): itsourcecode Courier Management System manage\_user.php sql injection (CVSS 6.9) - [CVE-2026-9575](https://cve.now/CVE-2026-9575.md): itsourcecode Student Transcript Processing System index.php sql injection (CVSS 6.9) - [CVE-2026-9574](https://cve.now/CVE-2026-9574.md): itsourcecode Student Transcript Processing System trans.php sql injection (CVSS 6.9) - [CVE-2026-9573](https://cve.now/CVE-2026-9573.md): itsourcecode Student Transcript Processing System index.php sql injection (CVSS 6.9) - [CVE-2026-9528](https://cve.now/CVE-2026-9528.md): itsourcecode Electronic Judging System delete\_judge.php sql injection (CVSS 6.9) - [CVE-2026-9527](https://cve.now/CVE-2026-9527.md): itsourcecode Electronic Judging System judges.php cross site scripting (CVSS 5.3) - [CVE-2026-9526](https://cve.now/CVE-2026-9526.md): itsourcecode Electronic Judging System edit\_team.php sql injection (CVSS 6.9) - [CVE-2026-9525](https://cve.now/CVE-2026-9525.md): itsourcecode Electronic Judging System edit\_judge.php sql injection (CVSS 6.9) - [CVE-2026-9383](https://cve.now/CVE-2026-9383.md): itsourcecode Electronic Judging System login.php sql injection (CVSS 6.9) - [CVE-2026-7822](https://cve.now/CVE-2026-7822.md): itsourcecode Courier Management System print\_pdets.php sql injection (CVSS 5.3) - [CVE-2026-7612](https://cve.now/CVE-2026-7612.md): itsourcecode Courier Management System edit\_user.php sql injection (CVSS 5.1) - [CVE-2026-7592](https://cve.now/CVE-2026-7592.md): itsourcecode Courier Management System edit\_staff.php sql injection (CVSS 6.9) - [CVE-2026-7555](https://cve.now/CVE-2026-7555.md): itsourcecode Electronic Judging System login.php sql injection (CVSS 6.9) - [CVE-2026-7077](https://cve.now/CVE-2026-7077.md): itsourcecode Courier Management System edit\_parcel.php sql injection (CVSS 6.9) - [CVE-2026-7076](https://cve.now/CVE-2026-7076.md): itsourcecode Courier Management System edit\_branch.php sql injection (CVSS 6.9) - [CVE-2026-7075](https://cve.now/CVE-2026-7075.md): itsourcecode Construction Management System locations.php sql injection (CVSS 6.9) - [CVE-2026-7074](https://cve.now/CVE-2026-7074.md): itsourcecode Construction Management System execute1.php sql injection (CVSS 6.9) - [CVE-2026-7073](https://cve.now/CVE-2026-7073.md): itsourcecode Construction Management System execute.php sql injection (CVSS 6.9) - [CVE-2026-6191](https://cve.now/CVE-2026-6191.md): itsourcecode Construction Management System equipments.php sql injection (CVSS 5.3) - [CVE-2026-6190](https://cve.now/CVE-2026-6190.md): itsourcecode Construction Management System employees.php sql injection (CVSS 5.3) - [CVE-2026-6030](https://cve.now/CVE-2026-6030.md): itsourcecode Construction Management System del1.php sql injection (CVSS 5.3) - [CVE-2026-6007](https://cve.now/CVE-2026-6007.md): itsourcecode Construction Management System del.php sql injection (CVSS 5.3) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/itsourcecode Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.