CVE-2026-78656— itsourcecode Sales and Inventory System cust_del.php sql injection
Quick assessment
Affected
itsourcecode Sales and Inventory System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
发现其sourcecode销售与库存系统1.0版本中存在一个漏洞。受影响的是文件/pages/cust_del.php中的未知函数。通过操纵参数ID可以导致SQL注入。该漏洞可被远程利用。此漏洞的利用代码已公开，可能被攻击者使用。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| itsourcecode | Sales and Inventory System | 1.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78656
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
itsourcecode Sales and Inventory System cust_del.php sql injection
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/cust_del.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| itsourcecode | Sales and Inventory System | 1.0 |
cpe:2.3:a:itsourcecode:sales_and_inventory_system:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-78656
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78656
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-78656 (1)
-
🔗 CVE-2026-78656 itsourcecode Sales and Inventory System cust_del.php sql injection vdb-entry technical-description
Proof of Concept for CVE-2026-78656 (1)
News Coverage for CVE-2026-78656 (1)
-
🔗 CVE-2026-78656 in Sales and Inventory System third-party-advisory
Other References for CVE-2026-78656 (2)
-
🔗 Submit #886455: itsourcecode Sales and Inventory System V1.0 SQL Injection third-party-advisory
IV. Related Vulnerabilities
Same product: Sales and Inventory System
-
CVE-2026-78185
itsourcecode Sales and Inventory System cust_edit.php sql in -
CVE-2026-78171
itsourcecode Sales and Inventory System processlogin.php sql -
CVE-2026-5810
SourceCodester Sales and Inventory System GET Parameter dele -
CVE-2026-4826
SourceCodester Sales and Inventory System HTTP GET Parameter -
CVE-2026-4825
SourceCodester Sales and Inventory System HTTP GET Parameter
Same vendor: itsourcecode
-
CVE-2026-78246
itsourcecode Online Clinic Management System Admin Login log -
CVE-2026-78245
itsourcecode Online Pharmacy System User Registration regist -
CVE-2026-78244
itsourcecode Real Estate Management System search.php sql in -
CVE-2026-78202
itsourcecode Payroll System admin_class.php save_settings un -
CVE-2026-78201
itsourcecode Payroll System admin_class.php login sql inject
Same weakness: CWE-89
-
CVE-2026-80236
Thinking Software Technology｜Efence - SQL Injection -
CVE-2026-9668
SQL injection vulnerability in ZTE SCP product -
CVE-2026-18884
WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQ -
CVE-2026-79845
code-projects Simple Inventory System edit.php sql injection -
CVE-2026-79804
SililaWijesinghe Food Ordering System search.php sql injecti
V. Comments for CVE-2026-78656
No comments yet