Vulnerabilities in itsourcecode

661 results
Vexday analysis

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-4864MEDIUMitsourcecode Restaurant Management System finished.php sql injectionEPSS 0.5%CVE-2024-7195MEDIUMitsourcecode Society Management System check_admin.php sql injectionEPSS 0.5%CVE-2024-10759MEDIUMitsourcecode Farm Management System edit-pig.php sql injectionEPSS 0.5%CVE-2025-4870MEDIUMitsourcecode Restaurant Management System menu_save.php sql injectionEPSS 0.5%CVE-2025-4865MEDIUMitsourcecode Restaurant Management System member_save.php sql injectionEPSS 0.5%CVE-2025-4881MEDIUMitsourcecode Restaurant Management System user_save.php sql injectionEPSS 0.5%CVE-2024-7190MEDIUMitsourcecode Society Management System get_price.php sql injectionEPSS 0.5%CVE-2025-4882MEDIUMitsourcecode Restaurant Management System team_update.php sql injectionEPSS 0.5%CVE-2025-0873MEDIUMitsourcecode Tailoring Management System customeredit.php sql injectionEPSS 0.5%CVE-2025-9154MEDIUMitsourcecode Online Tour and Travel Management System page-login.php sql injectionEPSS 0.5%CVE-2025-0872MEDIUMitsourcecode Tailoring Management System addpayment.php sql injectionEPSS 0.5%CVE-2025-4485MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2024-7277MEDIUMitsourcecode Alton Management System Add a Menu menu.php unrestricted uploadEPSS 0.5%CVE-2024-5981MEDIUMitsourcecode Online House Rental System manage_user.php sql injectionEPSS 0.5%CVE-2024-7680MEDIUMitsourcecode Tailoring Management System incedit.php sql injectionEPSS 0.5%CVE-2024-7794MEDIUMitsourcecode Vehicle Management System mybill.php sql injectionEPSS 0.5%CVE-2025-4486MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2025-4488MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2025-4484MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2025-4487MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%