CyberRota Analysis
AI-GeneratedThe itsourcecode Sales and Inventory System 1.0 is vulnerable to SQL injection through the 'firstname' parameter in the /pages/cust_transac.php?action=add file, allowing remote attackers to manipulate database queries. This could lead to unauthorized data access or modification, posing a risk to the integrity and confidentiality of sensitive information. Organizations using this system should prioritize patching this vulnerability to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/cust_transac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.