Sales and Inventory System vulnerabilities

A SQL injection vulnerability was found in itsourcecode Sales-and-Inventory-System in /pages/cust_searchfrm.php via manipulation of the ID argument. The attack can be launched remotely and a public exploit is already available. The product uses a rolling release model, so specific affected versions are not provided.

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/cust_pos_trans.php. Executing a manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.

A vulnerability in itsourcecode Sales and Inventory System 1.0 affects an unknown part of the file /pages/us_edit.php. Manipulation of the argument ID leads to SQL injection. The attack can be launched remotely, and the exploit is publicly available.

SQL injection vulnerability in itsourcecode Sales and Inventory System 1.0, affecting an unknown function in /pages/settings_edit.php. Manipulating the ID argument leads to SQL injection. The attack may be performed remotely, and the exploit is public.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in the file /pages/pro_transac.php?action=add. Manipulating the Name argument leads to SQL injection. The attack can be launched remotely, and the exploit has been disclosed.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in the file /pages/pos_transac.php?action=add. Manipulating the Customer argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been published.

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0 in the file /pages/cust_transac.php?action=add. Manipulating the firstname argument results in SQL injection. The attack can be launched remotely, and the exploit is now public.

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0 in the file /pages/us_del.php?type=user. Manipulating the ID argument leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed publicly.

A SQL injection vulnerability was found in itsourcecode Sales and Inventory System 1.0 in /pages/inv_searchfrm.php. Manipulation of the ID argument allows remote SQL queries. The exploit is public.

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0 in an unknown function of /pages/inv_edit.php. Manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely and the exploit is publicly available.

A vulnerability was found in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/sup_searchfrm.php. Manipulation of the argument ID leads to SQL injection. The attack can be initiated remotely, and the exploit has been disclosed.

A security flaw was discovered in itsourcecode Sales and Inventory System 1.0 in an unknown functionality of the file /pages/sup_edit.php. Manipulation of the argument ID results in SQL injection. The attack can be executed remotely, and the exploit has been released.

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0 in an unknown function of the file /pages/cust_searchfrm.php. Manipulation of the argument ID leads to SQL injection. Remote exploitation is possible, and the exploit is publicly available.

A vulnerability was detected in Sales and Inventory System 1.0 in an unknown function of /pages/cust_edit.php. Manipulation of the ID argument results in SQL injection. The attack can be executed remotely, and the exploit is now public.