CVE Catalog

CVE-2026-82696

MediumCVSS 6.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A SQL injection vulnerability was found in itsourcecode Sales and Inventory System 1.0 in /pages/inv_searchfrm.php. Manipulation of the ID argument allows remote SQL queries. The exploit is public.

Risk Assessment

An attacker can gain unauthorized access to the database, steal data (including credentials), or modify system content.

Recommendation

Update the system to the latest version or use parameterized SQL queries in /pages/inv_searchfrm.php. Restrict access to the application.

Other vulnerabilities in Sales and Inventory System

See all
Original NVD description (English source)

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/inv_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS