← Database

CVE-2026-90700

MEDIUM CVSS: 6.3 Published: 2026-09-14 Modified: 2026-09-16

Description

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. Such manipulation of the argument prodcode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

Affected Platforms

Unknown

Weakness Type

CWE-74, CWE-89

References