SQL injection flaws disclosed in itsourcecode Sales and Inventory

🕵️ RESEARCH & DEEP DIVES

• SQL injection flaws disclosed in itsourcecode Sales and Inventory System 1.0 transaction pages
  Multiple SQL injection vulnerabilities have been disclosed in itsourcecode Sales and Inventory System 1.0 with public exploits.

  • Affects users of itsourcecode Sales and Inventory System version 1.0
  • SQL injection via the firstname argument in /pages/cust_transac.php?action=add (CVE-2026-86234)
  • SQL injection via the Customer argument in /pages/pos_transac.php?action=add (CVE-2026-86235)
  • SQL injection via the Name argument in /pages/pro_transac.php?action=add (CVE-2026-86236)
  • Attacks can be launched remotely with low privileges; exploits are publicly available
  Sources 📄 Source: vuldb.com · 📎 Coverage: cve.threatint.com · 👁 via CVE ThreatInt

• itsourcecode Sales and Inventory System pos_transac.php add sql injectionA fl... — CVE ThreatInt

• mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate rev... — CVE ThreatInt

• JeecgBoot AiragModelController.java exportXls access controlA security vulner... — CVE ThreatInt

• MojoX::Authentication versions before 0.006 for Perl allow SAML authenticatio... — CVE ThreatInt

• valkey-io valkey kvstore.c kvstoreGetHashtable out-of-boundsA weakness has be... — CVE ThreatInt

• Projectwolds Online Attendance System profile.php cross site scriptingA secur... — CVE ThreatInt

• ChatGPT Astra is now rolling out to $20 Plus subscription — BleepingComputer

• Holes rule everything around me https://www. — @SwiftOnSecurity@infosec.exchange