CVE-2026-82541
MediumCVSS 6.3Summary
A security flaw was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/sup_edit.php. Manipulation of the argument ID results in SQL injection. The attack can be executed remotely, and the exploit has been released.
Risk Assessment
Risk of unauthorized database access, potentially leading to data leakage or modification.
Recommendation
Use parameterized SQL queries and update the system to the latest version.
Other vulnerabilities in Sales and Inventory System
See all- CVE-2026-82545Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/sup_searchfrm.php. Manipulation of the argument ID leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed.
- CVE-2026-82540Medium
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/cust_searchfrm.php. Manipulation of the argument ID leads to SQL injection. Remote exploitation is possible, and the exploit is publicly available.
- CVE-2026-78185Medium
A vulnerability was detected in Sales and Inventory System 1.0 in an unknown function of /pages/cust_edit.php. Manipulation of the ID argument results in SQL injection. The attack can be executed remotely, and the exploit is now public.
Original NVD description (English source)
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/sup_edit.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.