🚨 CVE-2026-86517
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
🎖@cveNotify
GitHub
itsourcecode sales-inventory-system V1.0 SQL Injection Vulnerability · Issue #1 · wakakakaaaaha/vuln
itsourcecode Sales and Inventory System 1.0 - Authenticated SQL Injection in /pages/us_searchfrm.php Affected Product Product: Sales and Inventory System Vendor: itsourcecode Vendor Homepage: https...
September 8, 2026 59 1
