CVE-2026-114250mediumCWE-74CWE-89

CVE-2026-114250: fallo de gravedad media en itsourcecode Sales-and-Inventory-System

itsourcecode Sales-and-Inventory-System cust_edit.php sql injection

Publicada el

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 5.3epss 0.2%
probabilidad de explotación
0.2%top 89% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/cust_edit.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
itsourcecode · Sales-and-Inventory-System
PoCs públicas encontradas — 1
cve_referencegithub.com/DefaultFuction/Sales-and-Inventory-System/issues/1no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — itsourcecode Sales-and-Inventory-System

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-114251MEDIUMitsourcecode Sales-and-Inventory-System cust_del.php sql injectionEPSS 0.3%CVE-2026-114252MEDIUMitsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injectionEPSS 0.2%
Referencias
https://github.com/DefaultFuction/Sales-and-Inventory-System/issues/1https://itsourcecode.com/https://vuldb.com/cve/CVE-2026-114250https://vuldb.com/submit/1018590https://vuldb.com/vuln/424682https://vuldb.com/vuln/424682/cti