Lucene search
+L

6208 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/30 12:00 a.m.•2 views

CVE-2026-82485: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/proedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose...

6.5CVSS6.4AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/30 12:00 a.m.•2 views

CVE-2026-82484: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/empsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•22 views

PT-2026-83531

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the /pages/emp searchfrm.php file. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL comman...

6.5CVSS7.1AI score0.00333EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•25 views

PT-2026-83535

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/pro edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclos...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•21 views

PT-2026-83542

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust searchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•22 views

PT-2026-83567

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within an unknown function in the /pages/sup searchfrm.php endpoint. SQL injection is a technique...

6.5CVSS6.7AI score0.00333EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/30 12:00 a.m.•2 views

CVE-2026-82541: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/30 12:00 a.m.•26 views

PT-2026-83550

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the /pages/sup edit.php endpoint. The issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL command...

6.5CVSS7.1AI score0.00333EPSS
SaveExploits0References9
NVD
NVD
•added 2026/08/29 10:16 p.m.•19 views

CVE-2026-82422

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/29 9:45 p.m.•57 views

CVE-2026-82422 itsourcecode Sales and Inventory System emp_del.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS0.00333EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/29 9:45 p.m.•44 views

CVE-2026-82422

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/emp_del.php. Manipulation of the ID argument allows a remote attacker with low privileges to execute arbitrary SQL, impacting confidentiality, integrity, and availability (CVSS 3....

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/29 9:45 p.m.•13 views

CVE-2026-82422 itsourcecode Sales and Inventory System emp_del.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
NVD
NVD
•added 2026/08/29 9:16 p.m.•17 views

CVE-2026-82421

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

6.5CVSS0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/29 9:00 p.m.•51 views

CVE-2026-82421 itsourcecode Sales and Inventory System emp_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

6.5CVSS0.00333EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/29 9:00 p.m.•27 views

CVE-2026-82421

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/emp_edit.php . The unvalidated ID argument can be manipulated to inject SQL queries. The attack is remotely exploitable with low privileges required and no user interaction. The e...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/29 9:00 p.m.•18 views

EUVD-2026-68136

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

6.5CVSS6.6AI score0.00333EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/08/29 12:00 a.m.•26 views

PT-2026-83498

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists due to improper processing of the /pages/emp edit.php endpoint. A remote attacker can exploit this by manipulating the ID argument to execute...

6.5CVSS6.8AI score0.00333EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/29 12:00 a.m.•1 views

CVE-2026-82422: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/29 12:00 a.m.•3 views

CVE-2026-82421: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

6.5CVSS6.6AI score0.00333EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/28 5:57 p.m.•33 views

EUVD-2026-42994

Snipe-IT has an authorization bypass on print inventory page...

4.3CVSS5.8AI score0.00342EPSS
SaveExploits1References4
Rows per page
Query Builder