Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Itsourcecode

First CVE: May 26, 2024Active for: 2 yearsTotal CVEs: 69
47.1
VTI Score
High

Itsourcecode develops a focused portfolio of web-based educational management and laboratory systems, including student enrollment, school administration, and information management platforms that serve institutional deployments. Vulnerabilities affecting this vendor skew strongly toward critical severity and concentrate heavily in injection-class weaknesses—SQL injection, code injection, and cross-site scripting—alongside file-upload validation issues, reflecting the vendor's reliance on web-application frameworks handling untrusted user input from students, staff, and administrators. These weakness classes recur across the vendor's product line and are characteristic of educational software that must process and display diverse data from a wide user base without adequate input sanitization. Defenders should prioritize inventory and isolation of these systems from untrusted networks and apply patches immediately upon availability. Current severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
69
Total CVEs
More Total CVEs than 99% of tracked vendors
0.9
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
9.4
Avg CVSS Score
Higher Avg CVSS Score than 90% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Itsourcecode over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 26, 2024
2 years ago
Most Recent CVE
Apr 10, 2026
107 days ago

Products(25 total)

Top CVEs

Signals from CVEs in this vendor scope (69 CVEs).

69 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-1176CRITICAL
A security flaw has been discovered in itsourcecode School Management System 1.0. Affected is an unknown function of the file /subject/index.php. Performing a manipulation of the a
Jan 19, 20269.834NONO
CVE-2025-9838CRITICAL
A vulnerability was identified in itsourcecode Student Information Management System 1.0. Impacted is an unknown function of the file /admin/modules/subject/index.php. Such manipul
Sep 2, 20259.834NONO
CVE-2026-2018CRITICAL
A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/settings/controller.php. This manipulation of the argument ID
Feb 6, 20269.833NONO
CVE-2025-13299CRITICAL
A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing a manipulati
Nov 17, 20259.833NONO
CVE-2025-9837CRITICAL
A vulnerability was determined in itsourcecode Student Information Management System 1.0. This issue affects some unknown processing of the file /admin/modules/student/index.php. T
Sep 2, 20259.833NONO
CVE-2026-3730CRITICAL
A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?
Mar 8, 20269.832NONO
CVE-2026-3261CRITICAL
A flaw has been found in itsourcecode School Management System 1.0. This impacts an unknown function of the file /settings/index.php of the component Setting Handler. This manipula
Feb 26, 20269.832NONO
CVE-2026-2014CRITICAL
A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/index.php. Performing a manipulati
Feb 6, 20269.832NONO
CVE-2026-2013CRITICAL
A vulnerability was identified in itsourcecode Student Management System 1.0. This affects an unknown function of the file /ramonsys/soa/index.php. Such manipulation of the argumen
Feb 6, 20269.832NONO
CVE-2026-2012CRITICAL
A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facultyloading/index.php. This manip
Feb 6, 20269.832NONO
View all 69 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products69 CVEs
16%
78%
Severity distribution among all CVEs352,719 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network69 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low69 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None64 (92.8%)
Unknown0 (0.0%)
Required5 (7.2%)
Privileges Required
Low10 (14.5%)
High1 (1.4%)
None58 (84.1%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (69 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Itsourcecode.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Itsourcecode — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Itsourcecode's Products

View all 2 CNAs →

Top CWEs