Approved changes feed: RSS · Atom

cpe:2.3:a:itsourcecode:sales_and_inventory_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorItsourcecode (14c06684-839a-5802-ab2e-bd37208c001a)
ProductSales And Inventory System (723722b7-a95c-56be-89d6-c2e2905769e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4886 vulnerable 2026-06-08 07:29:17.461331 itsourcecode Sales and Inventory System product_update.php sql injection
HIGH (7.3)
A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/product_update.php. The manipulation of the argument serial leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-05-18T16:00:06.496Z
Updated: 2025-05-19T15:22:29.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4885 vulnerable 2026-06-08 07:29:17.460848 itsourcecode Sales and Inventory System product_add.php sql injection
HIGH (7.3)
A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/product_add.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Published: 2025-05-18T15:31:05.257Z
Updated: 2025-05-19T15:22:35.379Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.