Vulnerabilities in itsourcecode

661 results
Vexday analysis

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-4301MEDIUMitsourcecode Content Management System search-notice.php sql injectionEPSS 0.5%CVE-2025-4726MEDIUMitsourcecode Placement Management System view_student.php sql injectionEPSS 0.5%CVE-2025-4360MEDIUMitsourcecode Gym Management System view_member.php sql injectionEPSS 0.5%CVE-2025-4724MEDIUMitsourcecode Placement Management System student_profile.php sql injectionEPSS 0.5%CVE-2025-4723MEDIUMitsourcecode Placement Management System all_student.php sql injectionEPSS 0.5%CVE-2025-4725MEDIUMitsourcecode Placement Management System view_drive.php sql injectionEPSS 0.5%CVE-2025-4359MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2025-4362MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.5%CVE-2025-4721MEDIUMitsourcecode Placement Management System drive.php sql injectionEPSS 0.5%CVE-2025-4722MEDIUMitsourcecode Placement Management System edit_profile.php sql injectionEPSS 0.5%CVE-2024-6953MEDIUMitsourcecode Tailoring Management System sms.php sql injectionEPSS 0.5%CVE-2025-6489MEDIUMitsourcecode Agri-Trading Online Shopping System transactionsave.php sql injectionEPSS 0.5%CVE-2025-0946MEDIUMitsourcecode Tailoring Management System templatedelete.php sql injectionEPSS 0.5%CVE-2025-0945MEDIUMitsourcecode Tailoring Management System typedelete.php sql injectionEPSS 0.5%CVE-2025-4023MEDIUMitsourcecode Placement Management System add_company.php sql injectionEPSS 0.5%CVE-2025-4025MEDIUMitsourcecode Placement Management System registration.php sql injectionEPSS 0.5%CVE-2024-9036MEDIUMitsourcecode Online Bookstore admin_add.php unrestricted uploadEPSS 0.5%CVE-2025-4884MEDIUMitsourcecode Restaurant Management System assign_save.php sql injectionEPSS 0.5%CVE-2025-4885MEDIUMitsourcecode Sales and Inventory System product_add.php sql injectionEPSS 0.5%CVE-2025-4886MEDIUMitsourcecode Sales and Inventory System product_update.php sql injectionEPSS 0.5%