CVE-2026-86517 | itsourcecode Sales and Inventory System 1.0 /pages/us_searchfrm.php mysqli_query ID sql injection

A vulnerability described as critical has been identified in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfrm.php. Executing a manipulation of the argument ID can lead to sql injection.

This vulnerability is registered as CVE-2026-86517. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More