CVE-2026-82422

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/emp_del.php. Manipulation of the ID argument allows a remote attacker with low privileges to execute arbitrary SQL, impacting confidentiality, integrity, and availability (CVSS 3....

CVE-2026-82422 itsourcecode Sales and Inventory System emp_del.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

CVE-2026-82421 itsourcecode Sales and Inventory System emp_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

EUVD-2026-68136

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

PT-2026-83499

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The issue exists in the...

CVE-2026-82422: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

PT-2026-83498

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists due to improper processing of the /pages/emp edit.php endpoint. A remote attacker can exploit this by manipulating the ID argument to execute...

EUVD-2026-66769

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-81202

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-81202 itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-81202

A missing authentication flaw in itsourcecode Payroll System 1.0 allows an unauthenticated remote attacker to manipulate the action argument in ajax.php (the CRUD Operation Handler component), bypassing authentication on the create/read/update/delete functions. The vulnerability is scored CVSS 3....

CVE-2026-81202 itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

PT-2026-82327

Name of the Vulnerable Software and Affected Versions itsourcecode Payroll System version 1.0 Description A flaw in the CRUD Operation Handler component allows remote attackers to bypass authentication. The issue exists within the create/read/update/delete function of the ajax.php file. By...

CVE-2026-81202: Missing Authentication for Critical Function

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed fr...

CVE-2026-78656

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_del.php, triggered by manipulation of the ID argument. The flaw can be exploited remotely with low privileges required (authenticated user) and no user interaction, yielding low impact...

CVE-2026-78656 itsourcecode Sales and Inventory System cust_del.php sql injection

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custdel.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

PT-2026-81181

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust del.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-78246

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

EUVD-2026-64828

A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible...

CVE-2026-78246

A SQL injection vulnerability exists in itsourcecode Online Clinic Management System 1.0 , specifically in the Admin Login component (file success/login.php). The root cause is the unsanitized handling of the Username argument, allowing an unauthenticated remote attacker to inject arbitrary SQL. ...