Vulnerabilities in itsourcecode

661 results
Vexday analysis

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2024-6195MEDIUMitsourcecode Tailoring Management System orderadd.php sql injectionEPSS 0.4%CVE-2025-9768MEDIUMitsourcecode Sports Management System mode.php sql injectionEPSS 0.4%CVE-2026-4223MEDIUMitsourcecode Payroll Management System manage_employee.php sql injectionEPSS 0.4%CVE-2025-9593MEDIUMitsourcecode Apartment Management System unit_status_info.php sql injectionEPSS 0.4%CVE-2026-90795MEDIUMitsourcecode Loan Management System navbar.php cross site scriptingEPSS 0.4%CVE-2026-3042MEDIUMitsourcecode Event Management System index.php sql injectionEPSS 0.4%CVE-2024-7916MEDIUMnafisulbari/itsourcecode Insurance Management System Add Nominee Page addNominee.php cross site scriptingEPSS 0.4%CVE-2025-6351MEDIUMitsourcecode Employee Record Management System editprofile.php sql injectionEPSS 0.4%CVE-2025-10033MEDIUMitsourcecode Online Discussion Forum admin sql injectionEPSS 0.4%CVE-2025-12617MEDIUMitsourcecode Billing System login_crud.php sql injectionEPSS 0.4%CVE-2025-10668MEDIUMitsourcecode Online Discussion Forum compose_msg_admin.php sql injectionEPSS 0.4%CVE-2026-3944MEDIUMitsourcecode University Management System att_add.php sql injectionEPSS 0.4%CVE-2026-2225MEDIUMitsourcecode News Portal Project Administrator Login index.php sql injectionEPSS 0.4%CVE-2026-2691MEDIUMitsourcecode Event Management System manage_register.php sql injectionEPSS 0.4%CVE-2026-2013MEDIUMitsourcecode Student Management System index.php sql injectionEPSS 0.4%CVE-2026-2014MEDIUMitsourcecode Student Management System index.php sql injectionEPSS 0.4%CVE-2026-13551MEDIUMitsourcecode Baptism Information Management System editBaptism.php sql injectionEPSS 0.4%CVE-2026-13550MEDIUMitsourcecode Baptism Information Management System delbaptism.php sql injectionEPSS 0.4%CVE-2026-14688MEDIUMitsourcecode Online Hotel Management System login.php sql injectionEPSS 0.4%CVE-2026-13555MEDIUMitsourcecode Online Hotel Management System controller.php add sql injectionEPSS 0.4%