CVE-2026-85383

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invdel.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be us...

CVE-2026-81194

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify authorization when retrieving order line-item data, allowing any authenticated user including Subscribers to read other instructors' course sales records by supplying another user's identifier...

CVE-2026-82696

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to t...

EUVD-2026-68510

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to t...

CVE-2026-82696 itsourcecode Sales and Inventory System inv_searchfrm.php sql injection

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/invsearchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to t...

CVE-2026-82696

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_searchfrm.php. The vulnerability is triggered by manipulating the ID argument and can be exploited remotely with low privileges (no user interaction required). The exploit is described ...

CVE-2026-82609

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might b...

EUVD-2026-68333

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might b...

CVE-2026-82609

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/inv_edit.php , triggered by manipulating the ID argument. The vulnerability allows a remote attacker with low privileges and no user interaction to impact confidentiality, integrity, and av...

CVE-2026-82609 itsourcecode Sales and Inventory System inv_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/invedit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might b...

CVE-2026-82545

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2026-82545 itsourcecode Sales and Inventory System sup_searchfrm.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

EUVD-2026-68228

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/supsearchfrm.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and ma...

CVE-2026-82545

CVE-2026-82545 is a SQL injection vulnerability in itsourcecode Sales and Inventory System 1.0 , located in an unknown function of the file /pages/sup_searchfrm.php . The flaw is triggered by manipulating the ID argument, and can be exploited remotely with low privileges (CVSS 3.1: 6.3 MEDIUM , C...

CVE-2026-82540

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custsearchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and mig...

CVE-2026-82541

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-68197

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-82541 itsourcecode Sales and Inventory System sup_edit.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

CVE-2026-82541

A SQL injection vulnerability was identified in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/sup_edit.php through manipulation of the ID argument. The flaw allows a remote attacker with low privileges to inject SQL commands, potentially leading to partial compromi...

CVE-2026-82540

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_searchfrm.php, triggered by manipulation of the ID parameter. The vulnerable function is not further specified in the provided documents. Remote exploitation is possible with low privi...