Threat database

CVE-2026-90574 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in the /pages/emp_transac.php?action=add endpoint, where manipulation of the 'firstname' parameter can lead to SQL injection. The vulnerability can be exploited remotely without user interaction and requires low privileges. Public exploit code is available, increasing the risk of attacks. No official patch or remediation guidance has been provided yet.

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/cust_pos_trans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.

CVE-2026-86517 is a medium severity SQL injection vulnerability affecting itsourcecode Sales and Inventory System version 1.0. The vulnerability exists in the mysqli_query function within the /pages/us_searchfrm.php file. An attacker can exploit this flaw remotely by manipulating the ID argument to perform SQL injection. Exploit code is publicly available, but no official patch or remediation guidance has been provided.

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-86309 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in an unknown function within the /pages/pro_searchfrm.php file, where manipulation of the ID argument allows remote attackers to perform SQL injection. Exploit code has been published, but there are no known reports of active exploitation in the wild. No patch or official remediation has been provided yet.

CVE-2026-86291 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in the /pages/us_edit1.php file where manipulation of the ID argument allows remote attackers to inject SQL commands. The vulnerability has been publicly disclosed, but no known exploits are currently reported in the wild. No patch or remediation information is available at this time.

CVE-2026-86270 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in an unknown function within the /pages/settings_edit.php file, where manipulation of the ID argument can lead to SQL injection. The vulnerability can be exploited remotely without user interaction. Public exploit details have been disclosed. No patch or vendor advisory is currently provided.

CVE-2026-86269 is a medium severity SQL injection vulnerability affecting itsourcecode Sales and Inventory System version 1.0. The vulnerability is located in the /pages/emp_edit1.php file, where manipulation of the ID argument allows remote attackers to perform SQL injection. Exploit code exists, but there are no known reports of exploitation in the wild. No official patch or remediation guidance is currently available.

A vulnerability was detected in itsourcecode School Management System 1.0. Impacted is an unknown function of the file User_Login.php. The manipulation of the argument email results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

CVE-2026-86267 is a medium severity SQL injection vulnerability in itsourcecode Information System Society Membership System version 1.0. The vulnerability exists in the /society/check_student.php file where the student_id parameter is improperly sanitized, allowing remote attackers to inject SQL commands. This flaw can be exploited remotely without user interaction and requires low privileges. Public exploit code has been disclosed, increasing the risk of exploitation. No official patch or remediation guidance is currently available.

CVE-2026-86265 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The vulnerability exists in an unknown functionality within the file /pages/us_transac.php, where manipulation of the Username argument allows SQL injection. The vulnerability can be exploited remotely without user interaction. Public exploit code has been disclosed. No patch or official remediation information is currently available.

CVE-2026-86245 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The vulnerability exists in the /pages/sup_transac.php file, where the 'companyname' parameter can be manipulated by remote attackers to perform SQL injection. This flaw is publicly known and exploitable remotely. No patch or official remediation information is currently available.

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro_transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2026-86235 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in the /pages/pos_transac.php file when the 'Customer' argument is manipulated. This vulnerability allows remote attackers with low privileges to perform SQL injection without user interaction. Exploit code has been published, but no known active exploitation in the wild is reported. No official patch or remediation information is currently available.

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.

CVE-2026-86233 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in the /pages/us_del.php file, specifically in the 'ID' parameter, which can be manipulated remotely to perform SQL injection attacks. The vulnerability has been publicly disclosed, but no known exploits are currently reported in the wild. No official patch or remediation guidance is provided in the available data.

CVE-2026-86232 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The issue exists in the /pages/sup_del.php file when manipulating the 'ID' parameter, allowing remote attackers to execute SQL injection attacks. Exploit code has been publicly released. No patch or remediation information is currently available.

CVE-2026-86164 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in an unknown function within the /pages/trans_view.php file, where manipulation of the ID argument allows SQL injection. The vulnerability can be exploited remotely without user interaction and requires low privileges. Public exploit code is available, increasing the risk of exploitation. No official patch or remediation information is provided.

CVE-2026-86163 is a SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in the /pages/pro_del.php file where manipulation of the ID parameter allows injection of SQL commands. This vulnerability can be exploited remotely without user interaction. The exploit code is publicly available, increasing the risk of exploitation. The vulnerability has a medium severity rating with a CVSS 4.0 base score of 5.3.