PT-2026-27522 · Sourcecodester · Sourcecodester Simple Inventory System
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Sales and Inventory System version 1.0
Description
A security issue exists in SourceCodester Sales and Inventory System. The
update customer details.php file’s HTTP GET Parameter Handler is susceptible to SQL injection through manipulation of the sid argument. This allows for remote execution of attacks. The exploit has been publicly disclosed.Recommendations
Apply updates to address the SQL injection issue in the
update customer details.php file.Exploit
Fix
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Sourcecodester Simple Inventory System