PT-2026-86582

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclos...

PT-2026-86830

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the...

PT-2026-86622

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists in the /pages/us transac.php endpoint. This occurs when the Username variable is manipulated, allowing a remote attacker to execute arbitrary SQL...

CVE-2026-86235

A SQL injection flaw in itsourcecode Sales and Inventory System 1.0 allows a remote, low-privilege attacker to manipulate the Customer argument in /pages/pos_transac.php?action=add . The vulnerability is classified as MEDIUM severity (CVSS 3.1: 6.3) with impacts to confidentiality, integrity, and...

CVE-2026-86235 itsourcecode Sales and Inventory System pos_transac.php add sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/postransac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely. The exploit has been published and may...

CVE-2026-86234 itsourcecode Sales and Inventory System cust_transac.php add sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

CVE-2026-86234

CVE-2026-86234 affects itsourcecode Sales and Inventory System version 1.0. A SQL injection vulnerability exists in the file /pages/cust_transac.php (with the action=add parameter), triggered through manipulation of the firstname argument. The attack can be launched remotely and requires low priv...

CVE-2026-86234 itsourcecode Sales and Inventory System cust_transac.php add sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

CVE-2026-86164

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-86163

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

CVE-2026-86164 itsourcecode Sales and Inventory System trans_view.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-86164

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/trans_view.php, triggered by manipulation of the ID argument. The attack can be performed remotely with low privileges required and no user interaction (CVSS 3.1: 6.3 MEDIUM ). The exploit has be...

CVE-2026-86163 itsourcecode Sales and Inventory System pro_del.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

CVE-2026-86232: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...

CVE-2026-86164: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/transview.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

CVE-2026-86163: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/prodel.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might...

PT-2026-86578

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID variable in the '/pages/sup del.php?type=supplier' endpoint. SQL injection is a technique where an attacker...

PT-2026-86477

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/trans view.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public...

EUVD-2026-70856

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

CVE-2026-85383

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_del.php. The flaw is triggered by manipulating the ID argument in an unknown function within that file, allowing remote execution with low privileges required . The CVSS v3.1 score is 6...