CVE-2026-82421: itsourcecode Sales and Inventory System emp_edit.php sql injection
Published Aug 29, 2026
·Updated
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/empedit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
Affected Software
1 affected component
itsourcecode Sales and Inventory System=1.0
Event History
Aug 29, 2026
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates low privileges are required (PR:L). Exploitation can be initiated remotely and does not require user interaction.
2
Is public exploit code available?
Yes. The available data states that an exploit is publicly available and may be used.
3
What security impact can successful exploitation have?
The CVSS metrics indicate low impact to confidentiality, integrity, and availability. The issue is classified as SQL injection through the ID argument handled by /pages/emp_edit.php.