SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37975)

Sales and Inventory System is a sales and inventory management enterprise resource planning system developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter ID with...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37977)

Sales and Inventory System is a sales and inventory management enterprise resource planning system developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external input SQL statements in the parameter I...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37976)

Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter named...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37979)

Sales and Inventory System is an enterprise resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from the failure of the /pages/inv Edit1.php file to properly validate the ID parameter...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37978)

Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from incorrect handling of the prodcode parameter in the file/pages/proedit1.php. Attackers...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37980)

Sales and Inventory System is an enterprise resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from the failure of the /pages/sup Edit1.php file to properly validate the ID parameter...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37982)

Sales and Inventory System is a sales and inventory management enterprise resource planning system developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from incorrect handling of parameters in the file/pages/custpostrans.php. Attackers can explo...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37981)

Sales and Inventory System is an enterprise resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from incorrect handling of the parameter “firstname” in the...

CVE-2026-90700 itsourcecode Sales and Inventory System pro_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed public...

CVE-2026-90700: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/proedit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed public...

CVE-2026-90600 itsourcecode Sales and Inventory System inv_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...

CVE-2026-90597 itsourcecode Sales and Inventory System sup_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90597

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/sup_edit1.php via the ID argument. The flaw allows remote attackers with low privileges to manipulate the parameter and inject SQL, resulting in low impact ...

CVE-2026-90597 itsourcecode Sales and Inventory System sup_edit1.php sql injection

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90574

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90574

CVE-2026-90574 affects itsourcecode Sales and Inventory System 1.0 , specifically the file /pages/emp_transac.php?action=add. The SQL injection is triggered by manipulating the firstname argument, allowing a remote attacker with low privileges to compromise data. CVSS 3.1 scores it 6.3 (MEDIUM) w...

CVE-2026-90574 itsourcecode Sales and Inventory System emp_transac.php add sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90525 itsourcecode Sales and Inventory System cust_pos_trans.php sql injection

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-90597: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/supedit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90600: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b...