CVE-2026-78185
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
A vulnerability was detected in Sales and Inventory System 1.0 in an unknown function of /pages/cust_edit.php. Manipulation of the ID argument results in SQL injection. The attack can be executed remotely, and the exploit is now public.
Risk Assessment
A remote attack may allow unauthorized access to the database, modification or theft of data. The organization is at risk of severe confidentiality and integrity breaches.
Recommendation
Apply vendor patches immediately and validate input in cust_edit.php.
Other vulnerabilities in Sales and Inventory System
See all- CVE-2026-82545Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/sup_searchfrm.php. Manipulation of the argument ID leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed.
- CVE-2026-82541Medium
A security flaw was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/sup_edit.php. Manipulation of the argument ID results in SQL injection. The attack can be executed remotely, and the exploit has been released.
- CVE-2026-82540Medium
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/cust_searchfrm.php. Manipulation of the argument ID leads to SQL injection. Remote exploitation is possible, and the exploit is publicly available.
Original NVD description (English source)
A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. The impacted element is an unknown function of the file /pages/cust_edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.