CVE-2026-76990

Name of the Vulnerable Software and Affected Versions code-projects Simple Inventory System version 1.0

Description A remote SQL injection exists in the /delete.php endpoint. This issue occurs when the ID argument is manipulated, allowing an attacker to execute arbitrary SQL commands on the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the /delete.php endpoint to minimize the risk of exploitation.