itsourcecode Sales and Inventory System vulnerabilities
19 known CVE vulnerabilities in itsourcecode Sales and Inventory System, translated and rated.
- CVE-2026-90700Medium
A vulnerability was detected in an unknown function of /pages/pro_edit1.php in itsourcecode Sales and Inventory System 1.0. Manipulation of the prodcode argument leads to SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed.
- CVE-2026-90574Medium
A SQL injection vulnerability was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown function of /pages/emp_transac.php?action=add. Manipulation of the firstname argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.
- CVE-2026-86517Medium
A flaw in itsourcecode Sales and Inventory System 1.0 affects the mysqli_query function in /pages/us_searchfrm.php. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been published.
- CVE-2026-86310Medium
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. Manipulation of the argument ID leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
- CVE-2026-86309Medium
A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. Manipulation of the argument ID causes SQL injection. The attack can be initiated remotely. The exploit has been published and may be used.
- CVE-2026-86291Medium
In itsourcecode Sales and Inventory System 1.0, a vulnerability was detected in the file /pages/us_edit1.php. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed publicly.
- CVE-2026-86269Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0, specifically in the file /pages/emp_edit1.php. Manipulation of the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit has been published.
- CVE-2026-86265Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0, in the file /pages/us_transac.php. Manipulation of the Username argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.
- CVE-2026-86245Medium
A vulnerability was detected in itsourcecode Sales and Inventory System 1.0, in the file /pages/sup_transac.php. Manipulation of the companyname argument results in SQL injection. The attack can be initiated remotely, and the exploit is now public.
- CVE-2026-86232Medium
Vulnerability in itsourcecode Sales and Inventory System 1.0. An unknown functionality in /pages/sup_del.php?type=supplier is vulnerable to SQL injection via the ID argument. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-86164Medium
A SQL injection vulnerability was found in itsourcecode Sales and Inventory System 1.0 in the file /pages/trans_view.php. Manipulating the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit has been publicly released.
- CVE-2026-86163Medium
A SQL injection vulnerability was found in itsourcecode Sales and Inventory System 1.0 in the file /pages/pro_del.php. Manipulating the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit is publicly available.
- CVE-2026-85383Medium
A flaw has been found in itsourcecode Sales and Inventory System 1.0 in the file /pages/inv_del.php. Manipulation of the argument ID leads to SQL injection. The attack can be executed remotely. The exploit is public.
- CVE-2026-82485Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/pro_edit.php. Manipulating the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.
- CVE-2026-82484Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/emp_searchfrm.php. Manipulating the ID argument causes SQL injection. The attack can be initiated remotely, and the exploit has been published.
- CVE-2026-82422Medium
In itsourcecode Sales and Inventory System 1.0, a SQL injection vulnerability exists in the file /pages/emp_del.php via manipulation of the ID argument. The attack may be launched remotely, and the exploit has been released to the public.
- CVE-2026-82421Medium
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0, affecting the file /pages/emp_edit.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit is publicly available.
- CVE-2026-78656Medium
A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
- CVE-2026-78171High
A vulnerability has been found in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/processlogin.php. Manipulation of the User argument leads to SQL injection. The attack can be initiated remotely and the exploit has been disclosed publicly.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

