CVE-2026-19925

Name of the Vulnerable Software and Affected Versions SourceCodester Stock Management System version 1.0

Description An issue exists in the processing of the '/classes/Master.php?f=delete supplier' endpoint. Remote manipulation of the ID parameter allows for SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution.

Recommendations Update SourceCodester Stock Management System version 1.0 to a version that contains a fix for this issue. As a temporary mitigation, restrict access to the '/classes/Master.php?f=delete supplier' endpoint or avoid using the ID parameter within that file.