Threats tagged 'ghsa-mhmh-w2v2-6xg3'

CVE-2026-90574 is a medium severity SQL injection vulnerability in itsourcecode Sales and Inventory System version 1.0. The flaw exists in the /pages/emp_transac.php?action=add endpoint, where manipulation of the 'firstname' parameter can lead to SQL injection. The vulnerability can be exploited remotely without user interaction and requires low privileges. Public exploit code is available, increasing the risk of attacks. No official patch or remediation guidance has been provided yet.