CVE-2026-82484
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability was found in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/emp_searchfrm.php. Manipulating the ID argument causes SQL injection. The attack can be initiated remotely, and the exploit has been published.
Risk Assessment
The risk includes remote SQL injection, potentially leading to unauthorized data access or corruption.
Recommendation
It is recommended to apply patches or updates and implement SQL injection protections such as parameterized queries.
Other vulnerabilities in itsourcecode Sales and Inventory System
See all- CVE-2026-82485Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/pro_edit.php. Manipulating the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.
- CVE-2026-82422Medium
In itsourcecode Sales and Inventory System 1.0, a SQL injection vulnerability exists in the file /pages/emp_del.php via manipulation of the ID argument. The attack may be launched remotely, and the exploit has been released to the public.
- CVE-2026-82421Medium
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/emp_edit.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2026-78656Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
- CVE-2026-78171High
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/processlogin.php. Manipulation of the User argument leads to SQL injection. The attack can be initiated remotely and the exploit has been disclosed publicly.
Original NVD description (English source)
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/emp_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used.