CVE-2026-90566

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing a manipulation of the argument usertype...

CVE-2026-90566 Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing a manipulation of the argument usertype...

CVE-2026-90566 Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing a manipulation of the argument usertype...

CVE-2026-90566

CVE-2026-90566 affects the Rizwan17 inventory-management-system , an open-source project on GitHub. The vulnerable component is the createUserAccount function in register.php (Registration Handler). Manipulation of the usertype argument leads to improper authorization , allowing a remote, unauthe...

CVE-2026-90566 Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing a manipulation of the argument usertype...

EUVD-2026-77040

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing a manipulation of the argument usertype...

CVE-2026-90565 Rizwan17 inventory-management-system dashboard.php access control

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

CVE-2026-90565 Rizwan17 inventory-management-system dashboard.php access control

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

CVE-2026-90565

CVE-2026-90565 affects Rizwan17's inventory-management-system (a GitHub project using rolling release/continuous delivery, so no specific version boundaries are defined). The flaw resides in dashboard.php , where manipulation of the userid argument leads to improper access controls . The vulnerab...

CVE-2026-90565 Rizwan17 inventory-management-system dashboard.php access control

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

CVE-2026-90525

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-90525

CVE-2026-90525 affects itsourcecode Sales and Inventory System 1.0 , where a SQL injection vulnerability exists in the file /pages/cust_pos_trans.php. By manipulating the firstname parameter, an unauthenticated remote attacker can inject SQL, leading to low impact on confidentiality, integrity, a...

EUVD-2026-77023

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-90525 itsourcecode Sales and Inventory System cust_pos_trans.php sql injection

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

PT-2026-90871

Name of the Vulnerable Software and Affected Versions Rizwan17 inventory-management-system versions up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f Description A weakness in the Registration Handler component allows remote attackers to achieve improper authorization. This occurs through the...

PT-2026-90870

A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate t...

PT-2026-90931

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection flaw exists in the file /pages/emp transac.php?action=add. The issue occurs when the firstname argument is manipulated, allowing an attacker to execute...

PT-2026-90978

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...

PT-2026-90981

Name of the Vulnerable Software and Affected Versions Rizwan17 inventory-management-system versions up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2 Description A flaw in the file includes/process.php allows for remote cross-site request forgery CSRF, a type of attack that forces an authenticated...

PT-2026-90982

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within the /pages/inv edit1.php endpoint. SQL injection is a technique where an attacker inserts...