Lucene search
+L

2753 matches found

Cvelist
Cvelist
added 2026/08/29 9:45 p.m.50 views

CVE-2026-82422 itsourcecode Sales and Inventory System emp_del.php sql injection

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/empdel.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may...

6.5CVSS0.00204EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/29 9:45 p.m.25 views

CVE-2026-82422

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/emp_del.php. Manipulation of the ID argument allows a remote attacker with low privileges to execute arbitrary SQL, impacting confidentiality, integrity, and availability (CVSS 3....

6.5CVSS6.5AI score0.00204EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/29 9:16 p.m.13 views

CVE-2026-82421

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

6.5CVSS0.00204EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/29 9:00 p.m.20 views

CVE-2026-82421

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in the file /pages/emp_edit.php . The unvalidated ID argument can be manipulated to inject SQL queries. The attack is remotely exploitable with low privileges required and no user interaction. The e...

6.5CVSS6.6AI score0.00204EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/29 9:00 p.m.43 views

CVE-2026-82421 itsourcecode Sales and Inventory System emp_edit.php sql injection

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

6.5CVSS0.00204EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/29 9:00 p.m.13 views

EUVD-2026-68136

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might b...

6.5CVSS6.6AI score0.00204EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/08/29 12:00 a.m.18 views

PT-2026-83498

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection issue exists due to improper processing of the /pages/emp edit.php endpoint. A remote attacker can exploit this by manipulating the ID argument to execute...

6.5CVSS6.8AI score0.00204EPSS
SaveExploits0References8
NVD
NVD
added 2026/08/25 7:17 a.m.12 views

CVE-2026-78656

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custdel.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

6.5CVSS0.002EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/25 6:15 a.m.26 views

CVE-2026-78656

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/cust_del.php, triggered by manipulation of the ID argument. The flaw can be exploited remotely with low privileges required (authenticated user) and no user interaction, yielding low impact...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/25 6:15 a.m.37 views

CVE-2026-78656 itsourcecode Sales and Inventory System cust_del.php sql injection

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custdel.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

6.5CVSS0.002EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/25 6:15 a.m.7 views

EUVD-2026-65305

A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/custdel.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/24 4:16 a.m.14 views

CVE-2026-78185

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS0.0025EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/24 4:00 a.m.10 views

EUVD-2026-64721

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS5.5AI score0.0025EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 4:00 a.m.59 views

CVE-2026-78185 itsourcecode Sales and Inventory System cust_edit.php sql injection

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/custedit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used...

6.5CVSS0.0025EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/24 4:00 a.m.35 views

CVE-2026-78185

A SQL injection vulnerability exists in itsourcecode Sales and Inventory System 1.0 , specifically in an unknown function of the file /pages/cust_edit.php . An authenticated remote attacker can exploit this by manipulating the ID parameter, achieving partial impact on confidentiality, integrity, ...

6.5CVSS6.5AI score0.0025EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/24 2:15 a.m.24 views

CVE-2026-78171

itsourcecode Sales and Inventory System 1.0 is affected by a SQL injection vulnerability in the file /pages/processlogin.php. The manipulation of the User argument allows a remote, unauthenticated attacker to inject SQL queries, potentially compromising confidentiality, integrity, and availabilit...

7.5CVSS7.3AI score0.00328EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 2:15 a.m.53 views

CVE-2026-78171 itsourcecode Sales and Inventory System processlogin.php sql injection

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

7.5CVSS0.00328EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/24 2:15 a.m.8 views

EUVD-2026-64693

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit...

7.5CVSS7.4AI score0.00328EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/20 1:16 a.m.14 views

CVE-2026-76785

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transaction.php. Performing a manipulation of the argument orderBy/orderFormat results in sql injection. It is possible to...

6.5CVSS0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/20 12:30 a.m.41 views

CVE-2026-76785 amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll sql injection

A security flaw has been discovered in amirsanni Mini-Inventory-and-Sales-Management-System 0.1. Affected is the function Transaction::getAll of the file application/models/Transaction.php. Performing a manipulation of the argument orderBy/orderFormat results in sql injection. It is possible to...

6.5CVSS0.002EPSS
SaveExploits0References6
Rows per page
Query Builder