CVE-2026-82422

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0

Description A security flaw allows remote attackers to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The issue exists in the /pages/emp del.php endpoint through the manipulation of the ID variable.

Recommendations As a temporary workaround, restrict access to the /pages/emp del.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.