Veille CVE

Lundi 14 septembre 2026

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « itsourcecode Sales and Inventory System » ✕
  1. CVE-2026-90597 6.3 Moyenne

    itsourcecode Sales and Inventory System

    A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

  2. CVE-2026-90574 6.3 Moyenne

    itsourcecode Sales and Inventory System

    A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=add. The manipulation of the argument firstname results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.