CVE-2026-86236

Publié : 7 septembre 2026

Modifié : 7 septembre 2026

Score CVSS

6.3

MEDIUM

Description détaillée

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro_transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Références et Patchs

https://github.com/ltranquility/submit_repository/issues/6 https://itsourcecode.com/https://vuldb.com/cve/CVE-2026-86236 https://vuldb.com/submit/898738 https://vuldb.com/vuln/399393 https://vuldb.com/vuln/399393/cti

Dernières Vulnérabilités

CVE-2026-86519

A vulnerability was found in code-projects Student Crud Operation 1.0. This impacts an unknown function of the file /card_activation.sql of the component Backup File Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been made public and could be used.

VOIR DÉTAILS

CVE-2026-86518

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

VOIR DÉTAILS

CVE-2026-86517

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.

VOIR DÉTAILS