# Itsourcecode vulnerabilities Source: https://junglewise.ai/threats/vendors/itsourcecode Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/itsourcecode.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 146 vulnerabilities in Itsourcecode: 1 in the last 7 days and 55 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-124581, was published on 9 November 2026. 17 vulnerabilities in the last four weeks, level on the four before (17). 19 technologies have a page of their own. ## Counts - Last 7 days: 1 - Last 30 days: 14 - Last 90 days: 55 - All time: 146 (4 critical, 0 exploited in the wild) ## About Itsourcecode A provider of source code, tutorials, and project management systems for educational purposes. ## Latest Itsourcecode vulnerabilities - [CVE-2026-124581: itsourcecode Airline Reservation System SQL injection in manage_flight](https://junglewise.ai/threats/cve-2026-124581-a-vulnerability-was-determined-in-itsourcecode-airline) (high, CVSS 7.3, published 9 Nov 2026) - [CVE-2026-123028: itsourcecode Online Book Store SQL injection in admin_edit.php](https://junglewise.ai/threats/cve-2026-123028-a-vulnerability-was-identified-in-itsourcecode-online-book-store) (high, CVSS 7.3, published 5 Nov 2026) - [CVE-2026-122191: itsourcecode Airline Reservation System SQL injection](https://junglewise.ai/threats/cve-2026-122191-a-vulnerability-was-determined-in-itsourcecode-airline) (medium, CVSS 6.3, published 5 Nov 2026) - [CVE-2026-116515: itsourcecode Online Book Store SQL injection in /book.php](https://junglewise.ai/threats/cve-2026-116515-a-security-vulnerability-has-been-detected-in-itsourcecode) (medium, CVSS 6.3, published 26 Oct 2026) - [CVE-2026-116514: itsourcecode Airline Reservation System cross-site scripting in /book_flight.php](https://junglewise.ai/threats/cve-2026-116514-a-weakness-has-been-identified-in-itsourcecode-airline) (medium, CVSS 4.3, published 26 Oct 2026) - [CVE-2026-116101: itsourcecode Online Cake Ordering System SQL injection in /deletetransac.php](https://junglewise.ai/threats/cve-2026-116101-a-vulnerability-was-found-in-itsourcecode-online-cake-ordering) (medium, CVSS 6.3, published 26 Oct 2026) - [CVE-2026-114384: itsourcecode Online Cake Ordering System SQL injection in transactionsave.php](https://junglewise.ai/threats/cve-2026-114384-a-security-vulnerability-has-been-detected-in-itsourcecode) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-114381: itsourcecode Online Cake Ordering System SQL injection in orderdetail.php](https://junglewise.ai/threats/cve-2026-114381-a-vulnerability-was-determined-in-itsourcecode-online-cake) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-114380: itsourcecode Online Cake Ordering System SQL injection in /inserttrans.php](https://junglewise.ai/threats/cve-2026-114380-a-vulnerability-was-found-in-itsourcecode-online-cake-ordering) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-114378: itsourcecode Online Cake Ordering System SQL injection in deleteproduct.php](https://junglewise.ai/threats/cve-2026-114378-a-vulnerability-was-detected-in-itsourcecode-online-cake) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-114251: itsourcecode Sales and Inventory System SQL injection in cust_del.php](https://junglewise.ai/threats/cve-2026-114251-a-vulnerability-has-been-found-in-itsourcecode-sales-and) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-113741: itsourcecode Online Cake Ordering System reflected XSS in /404.php](https://junglewise.ai/threats/cve-2026-113741-a-vulnerability-has-been-found-in-itsourcecode-online-cake) (medium, CVSS 4.3, published 21 Oct 2026) - [CVE-2026-113740: itsourcecode Online Cake Ordering System SQL injection in deletecustomer.php](https://junglewise.ai/threats/cve-2026-113740-a-flaw-has-been-found-in-itsourcecode-online-cake-ordering) (medium, CVSS 6.3, published 21 Oct 2026) - [CVE-2026-112087: itsourcecode Online Cake Ordering System SQL injection in confirm.php](https://junglewise.ai/threats/cve-2026-112087-a-weakness-has-been-identified-in-itsourcecode-online-cake) (medium, CVSS 6.3, published 19 Oct 2026) - [CVE-2026-108959: itsourcecode Online Cake Ordering System SQL injection in /addtransacdetail.php](https://junglewise.ai/threats/cve-2026-108959-a-security-vulnerability-has-been-detected-in-itsourcecode) (medium, CVSS 6.3, published 13 Oct 2026) - [CVE-2026-108928: itsourcecode Online Admission System SQL injection in /admin/sum.php](https://junglewise.ai/threats/cve-2026-108928-a-security-vulnerability-has-been-detected-in-itsourcecode) (medium, CVSS 6.3, published 12 Oct 2026) - [CVE-2026-108927: itsourcecode Baptism Information Management System SQL injection in pbaptism.php](https://junglewise.ai/threats/cve-2026-108927-a-weakness-has-been-identified-in-itsourcecode-baptism) (medium, CVSS 6.3, published 12 Oct 2026) - [CVE-2026-108926: itsourcecode Baptism Information Management System SQL injection in ebaptism.php](https://junglewise.ai/threats/cve-2026-108926-a-security-flaw-has-been-discovered-in-itsourcecode-baptism) (medium, CVSS 6.3, published 12 Oct 2026) - [CVE-2026-105254: itsourcecode Online Admission System SQL injection in schoolyear.php](https://junglewise.ai/threats/cve-2026-105254-a-vulnerability-was-identified-in-itsourcecode-online-admission) (medium, CVSS 6.3, published 5 Oct 2026) - [CVE-2026-105253: itsourcecode Online Admission System SQL injection in login](https://junglewise.ai/threats/cve-2026-105253-a-vulnerability-was-determined-in-itsourcecode-online-admission) (high, CVSS 7.3, published 5 Oct 2026) - [CVE-2026-105187: itsourcecode Online Admission System SQL injection in admin key.php](https://junglewise.ai/threats/cve-2026-105187-a-vulnerability-has-been-found-in-itsourcecode-online-admission) (medium, CVSS 6.3, published 5 Oct 2026) - [CVE-2026-105186: itsourcecode Online Admission System SQL injection in /new.php](https://junglewise.ai/threats/cve-2026-105186-a-flaw-has-been-found-in-itsourcecode-online-admission-system-1) (medium, CVSS 6.3, published 5 Oct 2026) - [CVE-2026-105185: itsourcecode Online Admission System SQL injection in examinee.php](https://junglewise.ai/threats/cve-2026-105185-a-vulnerability-was-detected-in-itsourcecode-online-admission) (high, CVSS 7.3, published 5 Oct 2026) - [CVE-2026-105184: itsourcecode Online Admission System SQL injection in /admin/creteria.php](https://junglewise.ai/threats/cve-2026-105184-a-security-vulnerability-has-been-detected-in-itsourcecode) (high, CVSS 7.3, published 5 Oct 2026) - [CVE-2026-105183: itsourcecode Online Admission System SQL injection in /admin/confirm.php](https://junglewise.ai/threats/cve-2026-105183-a-weakness-has-been-identified-in-itsourcecode-online-admission) (high, CVSS 7.3, published 5 Oct 2026) ## Most severe Itsourcecode vulnerabilities - [CVE-2026-36235: itsourcecode Online Student Enrollment System SQL injection in scheduleSubList.php](https://junglewise.ai/threats/cve-2026-36235-itsourcecode-online-student-enrollment-system-sql-injection-in) (critical, CVSS 9.8, published 10 Apr 2026) - [CVE-2026-36234: itsourcecode Online Student Enrollment System SQL injection in newCourse.php](https://junglewise.ai/threats/cve-2026-36234-itsourcecode-online-student-enrollment-system-sql-injection-in) (critical, CVSS 9.8, published 10 Apr 2026) - [CVE-2026-36233: itsourcecode Online Student Enrollment System SQL injection in assignInstructorSubjects.php](https://junglewise.ai/threats/cve-2026-36233-itsourcecode-online-student-enrollment-system-sql-injection-in) (critical, CVSS 9.8, published 10 Apr 2026) - [CVE-2026-36232: itsourcecode Online Student Enrollment System SQL injection in instructorClasses.php](https://junglewise.ai/threats/cve-2026-36232-itsourcecode-online-student-enrollment-system-sql-injection-in) (critical, CVSS 9.8, published 10 Apr 2026) - [CVE-2026-82611: itsourcecode Online Medicine Delivery System SQL injection in login](https://junglewise.ai/threats/cve-2026-82611-itsourcecode-online-medicine-delivery-system-sql-injection-in) (high, CVSS 7.3, published 31 Aug 2026) - [CVE-2026-82610: itsourcecode Online Medicine Delivery System SQL injection in login](https://junglewise.ai/threats/cve-2026-82610-itsourcecode-online-medicine-delivery-system-sql-injection-in) (high, CVSS 7.3, published 31 Aug 2026) - [CVE-2026-85208: itsourcecode Online Medicine Delivery System unrestricted file upload in order management](https://junglewise.ai/threats/cve-2026-85208-itsourcecode-online-medicine-delivery-system-unrestricted-file) (high, CVSS 7.3, published 3 Sep 2026) - [CVE-2026-78245: itsourcecode Online Pharmacy System unrestricted file upload in user registration](https://junglewise.ai/threats/cve-2026-78245-itsourcecode-online-pharmacy-system-unrestricted-file-upload-in) (high, CVSS 7.3, published 24 Aug 2026) - [CVE-2025-15074: A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects…](https://junglewise.ai/threats/cve-2025-15074-a-vulnerability-was-identified-in-itsourcecode-online-frozen) (high, CVSS 7.3, published 25 Dec 2025) - [CVE-2026-85187: itsourcecode Online Medicine Delivery System SQL injection in order status update](https://junglewise.ai/threats/cve-2026-85187-itsourcecode-online-medicine-delivery-system-sql-injection-in) (high, CVSS 7.3, published 3 Sep 2026) ## Vulnerabilities per week 17 vulnerabilities in the last four weeks, level on the four before (17). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 5 | 0 | 0 | | 24 Aug 2026 | 3 | 0 | 0 | | 31 Aug 2026 | 11 | 0 | 0 | | 7 Sep 2026 | 1 | 0 | 0 | | 14 Sep 2026 | 2 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 5 | 0 | 0 | | 5 Oct 2026 | 9 | 0 | 0 | | 12 Oct 2026 | 4 | 0 | 0 | | 19 Oct 2026 | 8 | 0 | 0 | | 26 Oct 2026 | 3 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Itsourcecode technologies - [Itsourcecode Hospital Management System](https://junglewise.ai/threats/technologies/hospital-management-system): 40 vulnerabilities - [Itsourcecode Online Admission System](https://junglewise.ai/threats/technologies/online-admission-system): 11 vulnerabilities - [Itsourcecode Online Medicine Delivery System](https://junglewise.ai/threats/technologies/online-medicine-delivery-system): 11 vulnerabilities - [Itsourcecode Fees Management System](https://junglewise.ai/threats/technologies/fees-management-system): 9 vulnerabilities - [Itsourcecode Online Cake Ordering System](https://junglewise.ai/threats/technologies/itsourcecode-online-cake-ordering-system): 9 vulnerabilities - [Itsourcecode Online Hotel Management System](https://junglewise.ai/threats/technologies/online-hotel-management-system): 7 vulnerabilities - [Itsourcecode Electronic Judging System](https://junglewise.ai/threats/technologies/electronic-judging-system): 6 vulnerabilities - [Itsourcecode Construction Management System](https://junglewise.ai/threats/technologies/construction-management-system): 5 vulnerabilities - [Itsourcecode Leave Management System](https://junglewise.ai/threats/technologies/itsourcecode-leave-management-system): 5 vulnerabilities - [Itsourcecode Web-Based Internet Laboratory Management System](https://junglewise.ai/threats/technologies/web-based-internet-laboratory-management-system): 5 vulnerabilities - [Itsourcecode Baptism Information Management System](https://junglewise.ai/threats/technologies/baptism-information-management-system): 4 vulnerabilities - [Itsourcecode Content Management System](https://junglewise.ai/threats/technologies/content-management-system): 4 vulnerabilities - [Itsourcecode Online Clinic Management System](https://junglewise.ai/threats/technologies/online-clinic-management-system): 4 vulnerabilities - [Itsourcecode Online Student Enrollment System](https://junglewise.ai/threats/technologies/online-student-enrollment-system): 4 vulnerabilities - [Itsourcecode Airline Reservation System](https://junglewise.ai/threats/technologies/airline-reservation-system): 3 vulnerabilities - [Itsourcecode Courier-Management-System](https://junglewise.ai/threats/technologies/courier-management-system): 3 vulnerabilities - [Itsourcecode Hospital Management System Project In PHP](https://junglewise.ai/threats/technologies/hospital-management-system-project-in-php): 3 vulnerabilities - [Itsourcecode Online House Rental System](https://junglewise.ai/threats/technologies/online-house-rental-system): 3 vulnerabilities - [Itsourcecode Student-Transcript-Processing-System](https://junglewise.ai/threats/technologies/student-transcript-processing-system): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Itsourcecode vulnerabilities", https://junglewise.ai/threats/vendors/itsourcecode, 13 November 2026.