CVE-2026-9410 Sushmi-pal Invoice-System Profile Workflow profile improper authorization

A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This vulnerability affects unknown code of the file /profile of the component Profile Workflow. Such manipulation of the argument ID leads to improper authorization. It is possible to launc...

CVE-2025-9418

Affected: itsourcecode Apartment Management System 1.0. Vulnerable component: /owner/addowner.php. Issue: input manipulation of the ID parameter enables SQL injection (remote). Exploitation disclosed publicly. Remediation: no patch/version fixed is stated in the provided documents; some sources s...