Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-86235

itsourcecode Sales and Inventory System pos_transac.php add sql injection

Description

A flaw has been found in itsourcecode Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/pos_transac.php?action=add. This manipulation of the argument Customer causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

itsourcecode Sales and Inventory System

  • 1.0affected

References