EUVD-2026-68285

Improper Input Validation vulnerability in ash-project ashgraphql allows an unauthenticated client to crash a relay nodeid: ... query with an unhandled KeyError. AshGraphql.Graphql.Resolver.resolvenode/2 decodes the client-supplied global ID with decoderelayid/1, which only base64-decodes the...

ECHO-A405-9171-9BA2

Bulletin has no description...

CVE-2026-82545

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2026-82545 itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

EUVD-2026-68228

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2026-82545 itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2026-82540

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82541 itsourcecode Sales and Inventory System sup_edit.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-82541

A SQL injection vulnerability was identified in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/sup_edit.php through manipulation of the ID argument. The flaw allows a remote attacker with low privileges to inject SQL commands, potentially leading to partial compromi...

CVE-2026-82540

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_searchfrm.php, triggered by manipulation of the ID parameter. The vulnerable function is not further specified in the provided documents. Remote exploitation is possible with low privi...

CVE-2026-82540 itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82540 itsourcecode Sales and Inventory System cust_searchfrm.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82485

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2026-82484

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-82485 itsourcecode Sales and Inventory System pro_edit.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2026-82485 itsourcecode Sales and Inventory System pro_edit.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

EUVD-2026-68172

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

CVE-2026-82485

CVE-2026-82485 is a SQL injection in itsourcecode Sales and Inventory System 1.0 , located in the file /pages/pro_edit.php via manipulation of the ID argument. The vulnerability is remotely exploitable and requires low privileges (single authentication per CVSS v2), with no user interaction neede...

CVE-2026-82484 itsourcecode Sales and Inventory System emp_searchfrm.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

EUVD-2026-68171

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...