{"id":"CVE-2026-114252","title":"itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection","summary":"A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/cust_searchfrm.php. Performing a manipulation of the argu…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-89","CWE-74"],"vendor":"itsourcecode","product":"Sales-and-Inventory-System","affected":["Sales-and-Inventory-System 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac"],"published":"2026-10-21","updated":"2026-10-21","sourceUpdated":"2026-10-21T14:45:18.942Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-114252","references":[{"url":"https://vuldb.com/vuln/424684","label":"VDB-424684 | itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection"},{"url":"https://vuldb.com/vuln/424684/cti","label":"VDB-424684 | CTI Indicators (IOB, IOC, TTP, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-114252","label":"CVE-2026-114252 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1018592","label":"Submit #1018592 | DefaultFuction Sales and Inventory System V1.0 SQL Injection"},{"url":"https://github.com/DefaultFuction/Sales-and-Inventory-System/issues/3"},{"url":"https://itsourcecode.com/"}],"tags":["cve.org"],"ingestedAt":"2026-10-21T15:02:42.099Z","slug":"CVE-2026-114252","body":"## Overview\n\nA vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/cust_searchfrm.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.\n\n## Affected\n\n- `Sales-and-Inventory-System 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":35,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}