PT-2026-86985 · Itsourcecode · Sales/Inventory System
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli query of the file /pages/us searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sales/Inventory System