CVE-2026-82540
MediumCVSS 6.3Summary
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/cust_searchfrm.php. Manipulation of the argument ID leads to SQL injection. Remote exploitation is possible, and the exploit is publicly available.
Risk Assessment
Risk of unauthorized database access, potentially leading to data leakage or modification.
Recommendation
Use parameterized SQL queries and update the system to the latest version.
Other vulnerabilities in Sales and Inventory System
See all- CVE-2026-82545Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/sup_searchfrm.php. Manipulation of the argument ID leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed.
- CVE-2026-82541Medium
A security flaw was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/sup_edit.php. Manipulation of the argument ID results in SQL injection. The attack can be executed remotely, and the exploit has been released.
- CVE-2026-78185Medium
A vulnerability was detected in Sales and Inventory System 1.0 in an unknown function of /pages/cust_edit.php. Manipulation of the ID argument results in SQL injection. The attack can be executed remotely, and the exploit is now public.
Original NVD description (English source)
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_searchfrm.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.