Vendor
Itsourcecode vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 146 vulnerabilities in Itsourcecode: 1 in the last 7 days and 55 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-124581, was published on 9 November 2026. 17 vulnerabilities in the last four weeks, level on the four before (17). 19 technologies have a page of their own.
- Last 7 days
- 1
- Last 90 days
- 55
- Critical, all time
- 4
- Exploited in the wild
- 0
About Itsourcecode
A provider of source code, tutorials, and project management systems for educational purposes.
Itsourcecode technologies
- Itsourcecode Hospital Management System40
- Itsourcecode Online Admission System11
- Itsourcecode Online Medicine Delivery System11
- Itsourcecode Fees Management System9
- Itsourcecode Online Cake Ordering System9
- Itsourcecode Online Hotel Management System7
- Itsourcecode Electronic Judging System6
- Itsourcecode Construction Management System5
- Itsourcecode Leave Management System5
- Itsourcecode Web-Based Internet Laboratory Management System5
- Itsourcecode Baptism Information Management System4
- Itsourcecode Content Management System4
- Itsourcecode Online Clinic Management System4
- Itsourcecode Online Student Enrollment System4
- Itsourcecode Airline Reservation System3
- Itsourcecode Courier-Management-System3
- Itsourcecode Hospital Management System Project In PHP3
- Itsourcecode Online House Rental System3
- Itsourcecode Student-Transcript-Processing-System3
Latest Itsourcecode vulnerabilities
- CVE-2026-124581: itsourcecode Airline Reservation System SQL injection in manage_flighthighCVSS 7.3
- CVE-2026-123028: itsourcecode Online Book Store SQL injection in admin_edit.phphighCVSS 7.3
- CVE-2026-122191: itsourcecode Airline Reservation System SQL injectionmediumCVSS 6.3
- CVE-2026-116515: itsourcecode Online Book Store SQL injection in /book.phpmediumCVSS 6.3
- CVE-2026-116514: itsourcecode Airline Reservation System cross-site scripting in /book_flight.phpmediumCVSS 4.3
- CVE-2026-116101: itsourcecode Online Cake Ordering System SQL injection in /deletetransac.phpmediumCVSS 6.3
- CVE-2026-114384: itsourcecode Online Cake Ordering System SQL injection in transactionsave.phpmediumCVSS 6.3
- CVE-2026-114381: itsourcecode Online Cake Ordering System SQL injection in orderdetail.phpmediumCVSS 6.3
- CVE-2026-114380: itsourcecode Online Cake Ordering System SQL injection in /inserttrans.phpmediumCVSS 6.3
- CVE-2026-114378: itsourcecode Online Cake Ordering System SQL injection in deleteproduct.phpmediumCVSS 6.3
- CVE-2026-114251: itsourcecode Sales and Inventory System SQL injection in cust_del.phpmediumCVSS 6.3
- CVE-2026-113741: itsourcecode Online Cake Ordering System reflected XSS in /404.phpmediumCVSS 4.3
- CVE-2026-113740: itsourcecode Online Cake Ordering System SQL injection in deletecustomer.phpmediumCVSS 6.3
- CVE-2026-112087: itsourcecode Online Cake Ordering System SQL injection in confirm.phpmediumCVSS 6.3
- CVE-2026-108959: itsourcecode Online Cake Ordering System SQL injection in /addtransacdetail.phpmediumCVSS 6.3EPSS 0.2%
- CVE-2026-108928: itsourcecode Online Admission System SQL injection in /admin/sum.phpmediumCVSS 6.3EPSS 0.3%
- CVE-2026-108927: itsourcecode Baptism Information Management System SQL injection in pbaptism.phpmediumCVSS 6.3EPSS 0.3%
- CVE-2026-108926: itsourcecode Baptism Information Management System SQL injection in ebaptism.phpmediumCVSS 6.3EPSS 0.2%
- CVE-2026-105254: itsourcecode Online Admission System SQL injection in schoolyear.phpmediumCVSS 6.3EPSS 0.2%
- CVE-2026-105253: itsourcecode Online Admission System SQL injection in loginhighCVSS 7.3EPSS 0.3%
- CVE-2026-105187: itsourcecode Online Admission System SQL injection in admin key.phpmediumCVSS 6.3EPSS 0.2%
- CVE-2026-105186: itsourcecode Online Admission System SQL injection in /new.phpmediumCVSS 6.3EPSS 0.2%
- CVE-2026-105185: itsourcecode Online Admission System SQL injection in examinee.phphighCVSS 7.3EPSS 0.3%
- CVE-2026-105184: itsourcecode Online Admission System SQL injection in /admin/creteria.phphighCVSS 7.3EPSS 0.3%
- CVE-2026-105183: itsourcecode Online Admission System SQL injection in /admin/confirm.phphighCVSS 7.3EPSS 0.3%
Most severe Itsourcecode vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-36235: itsourcecode Online Student Enrollment System SQL injection in scheduleSubList.phpcriticalCVSS 9.8
- CVE-2026-36234: itsourcecode Online Student Enrollment System SQL injection in newCourse.phpcriticalCVSS 9.8
- CVE-2026-36233: itsourcecode Online Student Enrollment System SQL injection in assignInstructorSubjects.phpcriticalCVSS 9.8
- CVE-2026-36232: itsourcecode Online Student Enrollment System SQL injection in instructorClasses.phpcriticalCVSS 9.8
- CVE-2026-82611: itsourcecode Online Medicine Delivery System SQL injection in loginhighCVSS 7.3EPSS 0.6%
- CVE-2026-82610: itsourcecode Online Medicine Delivery System SQL injection in loginhighCVSS 7.3EPSS 0.6%
- CVE-2026-85208: itsourcecode Online Medicine Delivery System unrestricted file upload in order managementhighCVSS 7.3EPSS 0.5%
- CVE-2026-78245: itsourcecode Online Pharmacy System unrestricted file upload in user registrationhighCVSS 7.3EPSS 0.5%
- CVE-2025-15074: A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects…highCVSS 7.3EPSS 0.5%
- CVE-2026-85187: itsourcecode Online Medicine Delivery System SQL injection in order status updatehighCVSS 7.3EPSS 0.4%
Vulnerabilities per week
17 vulnerabilities in the last four weeks, level on the four before (17). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 5 | 0 | |
| 24 Aug 2026 | 3 | 0 | |
| 31 Aug 2026 | 11 | 0 | |
| 7 Sep 2026 | 1 | 0 | |
| 14 Sep 2026 | 2 | 0 | |
| 21 Sep 2026 | 1 | 0 | |
| 28 Sep 2026 | 5 | 0 | |
| 5 Oct 2026 | 9 | 0 | |
| 12 Oct 2026 | 4 | 0 | |
| 19 Oct 2026 | 8 | 0 | |
| 26 Oct 2026 | 3 | 0 | |
| 2 Nov 2026 | 2 | 0 | |
| 9 Nov 2026 | 1 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Itsourcecode vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/itsourcecode)<a href="https://junglewise.ai/threats/vendors/itsourcecode"><img src="https://junglewise.ai/threats/vendors/itsourcecode/badge.svg" alt="Itsourcecode vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/itsourcecode.json, and this page as text at https://junglewise.ai/threats/vendors/itsourcecode.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Itsourcecode vulnerabilities", https://junglewise.ai/threats/vendors/itsourcecode, 13 November 2026.