CVE-2026-86291 - itsourcecode Sales and Inventory System us_edit1.php sql injection

Back Back to CVE browser

MEDIUM

itsourcecode Sales and Inventory System us_edit1.php sql injection

Published Sep 7, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.33%

Description

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/us_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Affected products

Vendor ITSourceCode Product Sales and Inventory System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ITSourceCode

Sales and Inventory System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-89

SQL Injection

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72320
Advisory
https://github.com/ltranquility/submit_repository/issues/11
exploitissue-tracking
https://itsourcecode.com/
product
https://vuldb.com/cve/CVE-2026-86291
third-party-advisory
https://vuldb.com/submit/906259
third-party-advisory
https://vuldb.com/vuln/399453
vdb-entrytechnical-description
https://vuldb.com/vuln/399453/cti
signaturepermissions-required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-72320		Advisory
https://github.com/ltranquility/submit_repository/issues/11		exploitissue-tracking
https://itsourcecode.com/		product
https://vuldb.com/cve/CVE-2026-86291		third-party-advisory
https://vuldb.com/submit/906259		third-party-advisory
https://vuldb.com/vuln/399453		vdb-entrytechnical-description
https://vuldb.com/vuln/399453/cti		signaturepermissions-required