7 matches found
SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37981)
Sales and Inventory System is an enterprise resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability, which stems from incorrect handling of the parameter “firstname” in the...
CVE-2026-90574
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-90574 itsourcecode Sales and Inventory System emp_transac.php add sql injection
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-90574
CVE-2026-90574 affects itsourcecode Sales and Inventory System 1.0 , specifically the file /pages/emp_transac.php?action=add. The SQL injection is triggered by manipulating the firstname argument, allowing a remote attacker with low privileges to compromise data. CVSS 3.1 scores it 6.3 (MEDIUM) w...
EUVD-2026-77055
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-90574 itsourcecode Sales and Inventory System emp_transac.php add sql injection
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...
CVE-2026-90574: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...