CVE-2026-85383

A SQL injection vulnerability was found in itsourcecode Sales-and-Inventory-System in the file /pages/cust_edit.php, caused by manipulation of the ID argument. The attack can be performed remotely and a public exploit is already available.

A vulnerability was detected in an unknown function of /pages/pro_edit1.php in itsourcecode Sales and Inventory System 1.0. Manipulation of the prodcode argument leads to SQL injection, and the attack can be launched remotely. The exploit has been publicly disclosed.

A SQL injection vulnerability was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown function of /pages/emp_transac.php?action=add. Manipulation of the firstname argument leads to SQL injection. The attack can be performed remotely and the exploit has been publicly disclosed.

A flaw in itsourcecode Sales and Inventory System 1.0 affects the mysqli_query function in /pages/us_searchfrm.php. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been published.

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. Manipulation of the argument ID leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. Manipulation of the argument ID causes SQL injection. The attack can be initiated remotely. The exploit has been published and may be used.

In itsourcecode Sales and Inventory System 1.0, a vulnerability was detected in the file /pages/us_edit1.php. Manipulation of the ID argument leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed publicly.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0, specifically in the file /pages/emp_edit1.php. Manipulation of the ID argument leads to SQL injection. The attack can be performed remotely, and the exploit has been published.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0, in the file /pages/us_transac.php. Manipulation of the Username argument leads to SQL injection. The attack can be launched remotely, and the exploit has been publicly disclosed.

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0, in the file /pages/sup_transac.php. Manipulation of the companyname argument results in SQL injection. The attack can be initiated remotely, and the exploit is now public.