CVE-2026-78474

The Ni WooCommerce Sales Report WordPress plugin (before 4.2.0 ) is missing authentication and authorization checks on its report-printing routine (identified via the btn_print parameter). This allows unauthenticated users to retrieve WooCommerce order details and customer contact information, ta...

CVE-2026-78472

The Ni WooCommerce Sales Report WordPress plugin prior to version 4.2.0 contains an unauthenticated SQL injection vulnerability caused by the failure to sanitise and escape the sort parameter before its use in a SQL statement. This allows any unauthenticated user to execute arbitrary SQL commands...

EUVD-2026-80186

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...

EUVD-2026-80185

The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...

CVE-2026-83172

CVE-2026-83172 affects the Oracle Sales Online component (OSO Other ) of Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise the product. The vulnerability exhibits a scope chan...

EUVD-2026-79499

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: OSO Other. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online. While the...

EUVD-2026-79457

Vulnerability in the Oracle Sales product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales. While the...

CVE-2026-83128

CVE-2026-83128 affects the Oracle Sales Offline product (component: Internal Operations ) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via HTTP , requiring no user interaction. Success...

EUVD-2026-79456

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Sales Offline...

CVE-2026-83129

CVE-2026-83129 affects the Oracle Sales product of Oracle E-Business Suite (component: Internal Operations ), versions 12.2.3–12.2.15 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to gain unauthorized access to ...

EUVD-2026-79455

Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Offline...

CVE-2026-83127

CVE-2026-83127 affects the Oracle Sales Offline product (component: Internal Operations) within Oracle E-Business Suite , versions 12.2.3 through 12.2.15 . The vulnerability is easily exploitable by a low-privileged attacker with network access via HTTP , with no user interaction required. Due to...

EUVD-2026-79454

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online...

EUVD-2026-79452

Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Online...

CVE-2026-83124

Oracle Sales Online (component: Internal Operations ) in Oracle E-Business Suite versions 12.2.3 through 12.2.15 is affected by an easily exploitable vulnerability. A low-privileged attacker with network access via HTTP can compromise the product, potentially resulting in a full takeover with hig...

CVE-2026-90700

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed public...

CVE-2026-90700

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the prodcode argument of the file /pages/pro_edit1.php. The attack can be launched remotely with low privileges and no user interaction. CVSS 3.1 rates it 6.3 (MEDIUM) with low impact on confiden...

EUVD-2026-77333

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed public...

EUVD-2026-77129

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

EUVD-2026-77127

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...