CVE-2026-78171
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/processlogin.php. Manipulation of the User argument leads to SQL injection. The attack can be initiated remotely and the exploit has been disclosed publicly.
Risk Assessment
The organization may be exposed to remote SQL injection attacks, potentially leading to unauthorized database access, data theft, or system integrity compromise.
Recommendation
It is recommended to immediately update the system to a patched version if available, and to use parameterized queries and input validation.
Other vulnerabilities in itsourcecode Sales and Inventory System
See all- CVE-2026-82422Medium
In itsourcecode Sales and Inventory System 1.0, a SQL injection vulnerability exists in the file /pages/emp_del.php via manipulation of the ID argument. The attack may be launched remotely, and the exploit has been released to the public.
- CVE-2026-82421Medium
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/emp_edit.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2026-78656Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Original NVD description (English source)
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/processlogin.php. The manipulation of the argument User leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.