CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 11:50 UTC )
This week: 5,501 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,501 Show in the list Critical, last 7 days 358 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product itsourcecode:sales_and_inventory_system . Show all products
34 CVEs, showing 1 to 34
CVE Severity Title Published CVE-2026-90700 Medium 6.3 itsourcecode Sales and Inventory System pro_edit1.php sql injection Assigned by VulDB
Sep 14, 2026 CVE-2026-90600 Medium 6.3 itsourcecode Sales and Inventory System inv_edit1.php sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-90597 Medium 6.3 itsourcecode Sales and Inventory System sup_edit1.php sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-90574 Medium 6.3 itsourcecode Sales and Inventory System emp_transac.php add sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-90525 Medium 6.3 itsourcecode Sales and Inventory System cust_pos_trans.php sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-86675 Medium 6.3 itsourcecode Sales and Inventory System us_edit.php sql injection Assigned by VulDB
Sep 8, 2026 CVE-2026-86517 Medium 6.3 itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection Assigned by VulDB
Sep 8, 2026 CVE-2026-86310 Medium 6.3 itsourcecode Sales and Inventory System cust_edit1.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86309 Medium 6.3 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86291 Medium 6.3 itsourcecode Sales and Inventory System us_edit1.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86270 Medium 6.3 itsourcecode Sales and Inventory System settings_edit.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86269 Medium 6.3 itsourcecode Sales and Inventory System emp_edit1.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86265 Medium 6.3 itsourcecode Sales and Inventory System us_transac.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86245 Medium 6.3 itsourcecode Sales and Inventory System sup_transac.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86236 Medium 6.3 itsourcecode Sales and Inventory System pro_transac.php add sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86235 Medium 6.3 itsourcecode Sales and Inventory System pos_transac.php add sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86234 Medium 6.3 itsourcecode Sales and Inventory System cust_transac.php add sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86233 Medium 6.3 itsourcecode Sales and Inventory System us_del.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86232 Medium 6.3 itsourcecode Sales and Inventory System sup_del.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86164 Medium 6.3 itsourcecode Sales and Inventory System trans_view.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86163 Medium 6.3 itsourcecode Sales and Inventory System pro_del.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-85383 Medium 6.3 itsourcecode Sales and Inventory System inv_del.php sql injection Assigned by VulDB
Sep 4, 2026 CVE-2026-82696 Medium 6.3 itsourcecode Sales and Inventory System inv_searchfrm.php sql injection Assigned by VulDB
Aug 31, 2026 CVE-2026-82609 Medium 6.3 itsourcecode Sales and Inventory System inv_edit.php sql injection Assigned by VulDB
Aug 31, 2026 CVE-2026-82545 Medium 6.3 itsourcecode Sales and Inventory System sup_searchfrm.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82541 Medium 6.3 itsourcecode Sales and Inventory System sup_edit.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82540 Medium 6.3 itsourcecode Sales and Inventory System cust_searchfrm.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82485 Medium 6.3 itsourcecode Sales and Inventory System pro_edit.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82484 Medium 6.3 itsourcecode Sales and Inventory System emp_searchfrm.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82422 Medium 6.3 itsourcecode Sales and Inventory System emp_del.php sql injection Assigned by VulDB
Aug 29, 2026 CVE-2026-82421 Medium 6.3 itsourcecode Sales and Inventory System emp_edit.php sql injection Assigned by VulDB
Aug 29, 2026 CVE-2026-78656 Medium 6.3 itsourcecode Sales and Inventory System cust_del.php sql injection Assigned by VulDB
Aug 25, 2026 CVE-2026-78185 Medium 6.3 itsourcecode Sales and Inventory System cust_edit.php sql injection Assigned by VulDB
Aug 24, 2026 CVE-2026-78171 High 7.3 itsourcecode Sales and Inventory System processlogin.php sql injection Assigned by VulDB
Aug 24, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
