Lucene search
+L

11 matches found

NVD
NVD
•added 2026/10/21 3:17 p.m.•3 views

CVE-2026-114250

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

6.5CVSS0.00209EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/21 2:15 p.m.•21 views

CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

6.5CVSS0.00209EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/21 2:15 p.m.•11 views

CVE-2026-114250

A flaw in the itsourcecode Sales-and-Inventory-System (up to commit 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac) allows for a SQL injection via the ID argument during processing of the /pages/cust_edit.php file. This vulnerability can be exploited remotely to interact with the database. While the ex...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/21 2:15 p.m.•6 views

EUVD-2026-107284

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

6.5CVSS6.3AI score0.00209EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/21 2:15 p.m.•7 views

CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection

A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/custedit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit...

5.3CVSS5.5AI score
SaveExploits0References8
NVD
NVD
•added 2026/08/24 4:16 a.m.•21 views

CVE-2026-78185

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS0.00333EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/24 4:00 a.m.•9 views

CVE-2026-78185 itsourcecode Sales and Inventory System cust_edit.php sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/08/24 4:00 a.m.•19 views

EUVD-2026-64721

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS5.5AI score0.00333EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/24 4:00 a.m.•70 views

CVE-2026-78185

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/cust_edit.php . An authenticated remote attacker can exploit this by manipulating the ID parameter, achieving partial impact on confidentiality, integrity, ...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/24 4:00 a.m.•86 views

CVE-2026-78185 itsourcecode Sales and Inventory System cust_edit.php sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS0.00333EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•8 views

CVE-2026-78185: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS6.6AI score0.00333EPSS
SaveExploits0References3
Rows per page
Query Builder