CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

EUVD-2026-107323

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection

A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file adminclass.php. The manipulation of the argument username/password leads to sql injection. Remote exploitation of the attack is...

CVE-2026-114254

A SQL injection vulnerability exists in the Login function of the admin_class.php file within oretnom23 file-management-system-php (up to commit 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4). An attacker can manipulate the username or password arguments to execute arbitrary SQL commands. Remote explo...

EUVD-2026-107287

A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...

CVE-2026-114252 itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection

A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...

CVE-2026-114252 itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection

A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...

CVE-2026-114252

A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac) within an unknown function of the /pages/cust_searchfrm.php file. An attacker can initiate a remote attack by manipulating the ID argument to execute unautho...

CVE-2026-114252 itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection

A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/custsearchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated...

EUVD-2026-107285

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-114251

A SQL injection vulnerability exists in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac). The flaw is located in an unknown function within the /pages/cust_del.php file, where manipulation of the ID argument allows for remote execution of unautho...

CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/custdel.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit h...

CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

EUVD-2026-107284

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

CVE-2026-114250

A flaw in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac) allows for a SQL injection via the ID argument during processing of the /pages/cust_edit.php file. This vulnerability can be exploited remotely to interact with the database. While the ex...

CVE-2026-111852 WordPress Ajax Search Lite plugin <= 4.14.6 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This issue affects Ajax Search Lite: from n/a through 4.14.6...