{"id":"CVE-2026-86234","title":"A vulnerability was detected in itsourcecode Sales and Inventory System 1.0","summary":"A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-74","CWE-89"],"vendor":"itsourcecode","product":"Sales and Inventory System","affected":["sales_and_inventory_system 1.0"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:17:14.990","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86234","references":[{"url":"https://github.com/v89269561-web/CyberseReasearch/issues/3","label":"cna@vuldb.com"},{"url":"https://itsourcecode.com/","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86234","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/898594","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399391","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399391/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T14:05:05.288947Z"},"epss":0.00204,"epssPercentile":0.10724,"ingestedAt":"2026-09-07T12:10:14.777Z","slug":"CVE-2026-86234","body":"## Overview\n\nA vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":202098,"id":"CVE-2026-86234","ts":1789400062541,"field":"exploit_available","old":"false","new":"true"},{"seq":200825,"id":"CVE-2026-86234","ts":1789397616536,"field":"exploit_available","old":"true","new":"false"},{"seq":199518,"id":"CVE-2026-86234","ts":1789395529067,"field":"exploit_available","old":"false","new":"true"},{"seq":198763,"id":"CVE-2026-86234","ts":1789392244259,"field":"exploit_available","old":"true","new":"false"},{"seq":197096,"id":"CVE-2026-86234","ts":1789384292549,"field":"exploit_available","old":"false","new":"true"},{"seq":194225,"id":"CVE-2026-86234","ts":1789378783195,"field":"exploit_available","old":"true","new":"false"},{"seq":193012,"id":"CVE-2026-86234","ts":1789376515236,"field":"exploit_available","old":"false","new":"true"},{"seq":191799,"id":"CVE-2026-86234","ts":1789373631226,"field":"exploit_available","old":"true","new":"false"},{"seq":190584,"id":"CVE-2026-86234","ts":1789369475849,"field":"exploit_available","old":"false","new":"true"},{"seq":189371,"id":"CVE-2026-86234","ts":1789368416703,"field":"exploit_available","old":"true","new":"false"},{"seq":188154,"id":"CVE-2026-86234","ts":1789365230924,"field":"exploit_available","old":"false","new":"true"},{"seq":186941,"id":"CVE-2026-86234","ts":1789363471390,"field":"exploit_available","old":"true","new":"false"},{"seq":185727,"id":"CVE-2026-86234","ts":1789361229282,"field":"exploit_available","old":"false","new":"true"},{"seq":184514,"id":"CVE-2026-86234","ts":1789358363874,"field":"exploit_available","old":"true","new":"false"},{"seq":182765,"id":"CVE-2026-86234","ts":1789354317332,"field":"exploit_available","old":"false","new":"true"},{"seq":181558,"id":"CVE-2026-86234","ts":1789353317811,"field":"exploit_available","old":"true","new":"false"},{"seq":180351,"id":"CVE-2026-86234","ts":1789350284863,"field":"exploit_available","old":"false","new":"true"},{"seq":179144,"id":"CVE-2026-86234","ts":1789348293036,"field":"exploit_available","old":"true","new":"false"},{"seq":177937,"id":"CVE-2026-86234","ts":1789346370172,"field":"exploit_available","old":"false","new":"true"},{"seq":176730,"id":"CVE-2026-86234","ts":1789343184639,"field":"exploit_available","old":"true","new":"false"},{"seq":174847,"id":"CVE-2026-86234","ts":1789334875849,"field":"exploit_available","old":"false","new":"true"},{"seq":173642,"id":"CVE-2026-86234","ts":1789333690927,"field":"exploit_available","old":"true","new":"false"},{"seq":172456,"id":"CVE-2026-86234","ts":1789331093179,"field":"exploit_available","old":"false","new":"true"},{"seq":171270,"id":"CVE-2026-86234","ts":1789328781003,"field":"exploit_available","old":"true","new":"false"},{"seq":170065,"id":"CVE-2026-86234","ts":1789327197311,"field":"exploit_available","old":"false","new":"true"},{"seq":168860,"id":"CVE-2026-86234","ts":1789323840212,"field":"exploit_available","old":"true","new":"false"},{"seq":167655,"id":"CVE-2026-86234","ts":1789319702751,"field":"exploit_available","old":"false","new":"true"},{"seq":166450,"id":"CVE-2026-86234","ts":1789318776252,"field":"exploit_available","old":"true","new":"false"},{"seq":165245,"id":"CVE-2026-86234","ts":1789315790591,"field":"exploit_available","old":"false","new":"true"},{"seq":164040,"id":"CVE-2026-86234","ts":1789313634393,"field":"exploit_available","old":"true","new":"false"},{"seq":162835,"id":"CVE-2026-86234","ts":1789311903607,"field":"exploit_available","old":"false","new":"true"},{"seq":161630,"id":"CVE-2026-86234","ts":1789308733321,"field":"exploit_available","old":"true","new":"false"},{"seq":159743,"id":"CVE-2026-86234","ts":1789300470708,"field":"exploit_available","old":"false","new":"true"},{"seq":156732,"id":"CVE-2026-86234","ts":1789294755794,"field":"exploit_available","old":"true","new":"false"},{"seq":155527,"id":"CVE-2026-86234","ts":1789292968092,"field":"exploit_available","old":"false","new":"true"},{"seq":154322,"id":"CVE-2026-86234","ts":1789289797712,"field":"exploit_available","old":"true","new":"false"},{"seq":151573,"id":"CVE-2026-86234","ts":1789277630013,"field":"exploit_available","old":"false","new":"true"},{"seq":150534,"id":"CVE-2026-86234","ts":1789276245770,"field":"exploit_available","old":"true","new":"false"},{"seq":149501,"id":"CVE-2026-86234","ts":1789273824868,"field":"exploit_available","old":"false","new":"true"},{"seq":148468,"id":"CVE-2026-86234","ts":1789271348867,"field":"exploit_available","old":"true","new":"false"},{"seq":146499,"id":"CVE-2026-86234","ts":1789269398186,"field":"exploit_available","old":"false","new":"true"},{"seq":145304,"id":"CVE-2026-86234","ts":1789266339887,"field":"exploit_available","old":"true","new":"false"},{"seq":144208,"id":"CVE-2026-86234","ts":1789262616897,"field":"exploit_available","old":"false","new":"true"},{"seq":143112,"id":"CVE-2026-86234","ts":1789261533553,"field":"exploit_available","old":"true","new":"false"},{"seq":141943,"id":"CVE-2026-86234","ts":1789258831942,"field":"exploit_available","old":"false","new":"true"},{"seq":140784,"id":"CVE-2026-86234","ts":1789256727269,"field":"exploit_available","old":"true","new":"false"},{"seq":139586,"id":"CVE-2026-86234","ts":1789254832218,"field":"exploit_available","old":"false","new":"true"},{"seq":138388,"id":"CVE-2026-86234","ts":1789251934341,"field":"exploit_available","old":"true","new":"false"},{"seq":137190,"id":"CVE-2026-86234","ts":1789247832939,"field":"exploit_available","old":"false","new":"true"},{"seq":135992,"id":"CVE-2026-86234","ts":1789247056158,"field":"exploit_available","old":"true","new":"false"}]}