PT-2026-90862

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A remote SQL injection exists in the /pages/cust pos trans.php endpoint. This issue occurs when the firstname variable is manipulated, allowing an attacker to execute unauthorized...

CVE-2026-90574: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emptransac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been...

CVE-2026-90525: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/custpostrans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made availab...

CVE-2026-86675

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86675 itsourcecode Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86675 itsourcecode Sales and Inventory System us_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86675

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/us_edit.php, triggered through manipulation of the ID argument. The attack can be launched remotely and requires low-level privileges (authenticated access). The CVSS 3.1 base score is 6.3 (MEDIU...

CVE-2026-86517

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqliquery of the file /pages/ussearchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

EUVD-2026-72640

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqliquery of the file /pages/ussearchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-86517 itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqliquery of the file /pages/ussearchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-86517

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System version 1.0 , specifically in the mysqli_query function within /pages/us_searchfrm.php. Manipulating the ID parameter allows a remote, authenticated attacker to inject arbitrary SQL, resulting in low impact to confide...

PT-2026-88292

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-86517: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqliquery of the file /pages/ussearchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-86985

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli query of the file /pages/us searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-86309

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2026-86310 itsourcecode Sales and Inventory System cust_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2026-86310 itsourcecode Sales and Inventory System cust_edit1.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/custedit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the publ...

CVE-2026-86310

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/cust_edit1.php , triggered by manipulating the ID argument. The attack can be launched remotely with low privileges and no user interaction. A proof-of-concept exploit has been disclosed to the p...

CVE-2026-86309

itsourcecode Sales and Inventory System 1.0 is vulnerable to SQL injection via the ID argument in the file /pages/pro_searchfrm.php . The attack can be initiated remotely with low privileges and no user interaction, resulting in low impact on confidentiality, integrity, and availability (CVSS 3.1...

EUVD-2026-72410

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/prosearchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used...