{"id":"CVE-2026-86163","title":"A vulnerability was identified in itsourcecode Sales and Inventory System 1.0","summary":"A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carr…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-74","CWE-89"],"vendor":"itsourcecode","product":"Sales and Inventory System","affected":["sales_and_inventory_system 1.0"],"published":"2026-09-06","updated":"2026-09-08","sourceUpdated":"2026-09-08T18:21:15.397","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86163","references":[{"url":"https://github.com/CSDVi/cve/issues/3","label":"cna@vuldb.com"},{"url":"https://itsourcecode.com/","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86163","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/895531","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399288","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399288/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-08T17:07:04.199062Z"},"epss":0.00333,"epssPercentile":0.2376,"ingestedAt":"2026-09-06T15:57:05.264Z","slug":"CVE-2026-86163","body":"## Overview\n\nA vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/pro_del.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":8311,"id":"CVE-2026-86163","ts":1788919997289,"field":"exploit_available","old":"false","new":"true"},{"seq":8120,"id":"CVE-2026-86163","ts":1788919286530,"field":"exploit_available","old":"true","new":"false"},{"seq":7929,"id":"CVE-2026-86163","ts":1788916358645,"field":"exploit_available","old":"false","new":"true"},{"seq":7738,"id":"CVE-2026-86163","ts":1788915303941,"field":"exploit_available","old":"true","new":"false"},{"seq":7547,"id":"CVE-2026-86163","ts":1788912719020,"field":"exploit_available","old":"false","new":"true"},{"seq":7356,"id":"CVE-2026-86163","ts":1788911336567,"field":"exploit_available","old":"true","new":"false"},{"seq":7160,"id":"CVE-2026-86163","ts":1788909080575,"field":"exploit_available","old":"false","new":"true"},{"seq":6972,"id":"CVE-2026-86163","ts":1788907393517,"field":"exploit_available","old":"true","new":"false"},{"seq":6774,"id":"CVE-2026-86163","ts":1788905446375,"field":"exploit_available","old":"false","new":"true"},{"seq":6592,"id":"CVE-2026-86163","ts":1788903460574,"field":"exploit_available","old":"true","new":"false"},{"seq":6378,"id":"CVE-2026-86163","ts":1788901812375,"field":"exploit_available","old":"false","new":"true"},{"seq":6208,"id":"CVE-2026-86163","ts":1788899562844,"field":"exploit_available","old":"true","new":"false"},{"seq":5971,"id":"CVE-2026-86163","ts":1788898181272,"field":"exploit_available","old":"false","new":"true"},{"seq":5860,"id":"CVE-2026-86163","ts":1788895711851,"field":"exploit_available","old":"true","new":"false"},{"seq":5689,"id":"CVE-2026-86163","ts":1788894534794,"field":"exploit_available","old":"false","new":"true"},{"seq":5647,"id":"CVE-2026-86163","ts":1788891871725,"field":"exploit_available","old":"true","new":"false"},{"seq":5620,"id":"CVE-2026-86163","ts":1788890901875,"field":"exploit_available","old":"false","new":"true"}]}