CVE-2026-114251

Source
https://cve.org/CVERecord?id=CVE-2026-114251
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114251.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-114251
Published
2026-10-21T14:30:21Z
Modified
2026-10-22T02:48:49Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
itsourcecode Sales-and-Inventory-System cust_del.php sql injection
Details

A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/cust_del.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Database specific
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-74",
        "CWE-89"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/114xxx/CVE-2026-114251.json"
}
References

Affected packages

Git / github.com/defaultfuction/sales-and-inventory-system

Affected ranges

Type
GIT
Repo
https://github.com/defaultfuction/sales-and-inventory-system
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac"
                },
                {
                    "last_affected":  "0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

Other
0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-114251.json"