CVE-2026-100887

Name of the Vulnerable Software and Affected Versions amirsanni Mini-Inventory-and-Sales-Management-System versions up to 81bf0b55f5933f3b0dbb1583204a612e06605b95

Description A security flaw in the Database Query Builder component allows remote exploitation via SQL injection. The issue occurs when the orderBy argument is manipulated within the order by() function of the DB query builder.php file. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.