Lucene search
+L

6 matches found

CNVD
CNVD
•added 2026/09/16 12:00 a.m.•5 views

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37977)

Sales and Inventory System is a sales and inventory management enterprise resource planning system developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external input SQL statements in the parameter I...

6.5CVSS6.8AI score0.00333EPSS
SaveExploits0
NVD
NVD
•added 2026/09/04 2:17 a.m.•11 views

CVE-2026-85383

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

6.5CVSS0.00333EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/04 1:45 a.m.•45 views

CVE-2026-85383 itsourcecode Sales and Inventory System inv_del.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

6.5CVSS0.00333EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/09/04 1:45 a.m.•7 views

CVE-2026-85383 itsourcecode Sales and Inventory System inv_del.php sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/04 1:45 a.m.•12 views

EUVD-2026-70856

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/04 1:45 a.m.•25 views

CVE-2026-85383

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_del.php. The flaw is triggered by manipulating the ID argument in an unknown function within that file, allowing remote execution with low privileges required . The CVSS v3.1 score is 6...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
Rows per page
Query Builder