Lucene search
+L

20165 matches found

Vulnrichment
Vulnrichment
•added 2026/03/23 2:59 a.m.•10 views

CVE-2026-4569 SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is...

6.5CVSS6.4AI score0.00254EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/23 2:59 a.m.•53 views

CVE-2026-4569 SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is...

6.5CVSS0.00254EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/23 2:12 a.m.•59 views

CVE-2026-4568 SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS0.00316EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/03/23 2:12 a.m.•31 views

EUVD-2026-14351

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS5.6AI score0.00316EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/03/23 2:12 a.m.•11 views

CVE-2026-4568 SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/23 2:12 a.m.•50 views

CVE-2026-4568

CVE-2026-4568 affects SourceCodester Sales and Inventory System 1.0. The vulnerability resides in the HTTP GET handler for /update_supplier.php, where manipulating the sid parameter yields an SQL injection. It is a network-accessible issue with LOW privilege requirements and no user interaction, ...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•45 views

PT-2026-27043

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A flaw exists in SourceCodester Sales and Inventory System 1.0 related to the handling of HTTP POST requests. Specifically, manipulation of the searchtxt argument within a POST...

6.5CVSS6.7AI score0.00307EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•36 views

PT-2026-27042

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System 1.0. The issue is related to the manipulation of the searchtxt argument within an HTTP POST request to...

6.5CVSS6.6AI score0.00254EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•38 views

PT-2026-27050

Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-learning System version 1.0 Description A security issue exists in SourceCodester Simple E-learning System 1.0. The issue is related to SQL injection within the /includes/form handlers/delete post.php file, specifically...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•22 views

PT-2026-27046

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A weakness exists in SourceCodester Sales and Inventory System 1.0 related to the HTTP POST Request Handler functionality within the /view product.php file. Manipulation of the...

6.5CVSS6.7AI score0.00254EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•29 views

PT-2026-27269

A vulnerability was identified in SourceCodester Online Catering Reservation 1.0. Impacted is an unknown function of the file /search.php. Such manipulation of the argument rcode leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...

7.5CVSS7AI score0.0033EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•11 views

CVE-2026-4572: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /viewproduct.php of the component HTTP POST Request Handler. Executing a manipulation of the argument searchtxt can lead to sql injection. The attack m...

6.5CVSS6.4AI score0.00254EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•12 views

CVE-2026-4568: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•7 views

CVE-2026-4569: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is...

6.5CVSS6.3AI score0.00254EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/23 12:00 a.m.•40 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the searchtxt...

8.8CVSS6.6AI score0.00307EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•13 views

CVE-2026-4573: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0. This affects an unknown part of the file /includes/formhandlers/deletepost.php of the component HTTP GET Parameter Handler. The manipulation of the argument postid leads to sql injection. It is possible to...

6.5CVSS6.4AI score0.002EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/23 12:00 a.m.•11 views

CVE-2026-4571: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewpayments.php of the component HTTP POST Request Handler. Performing a manipulation of the argument searchtxt results in sql injection...

6.5CVSS6.4AI score0.00254EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/23 12:00 a.m.•29 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from improper handling of the sid...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•33 views

PT-2026-27041

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A SQL injection issue exists in SourceCodester Sales and Inventory System version 1.0. The issue is located in the HTTP GET Request Handler component, specifically within the...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2026/03/23 12:00 a.m.•22 views

PT-2026-27044

Name of the Vulnerable Software and Affected Versions SourceCodester Sales and Inventory System version 1.0 Description A security flaw exists in SourceCodester Sales and Inventory System 1.0. The issue is related to SQL injection within the HTTP POST Request Handler functionality, specifically i...

6.5CVSS6.3AI score0.00254EPSS
SaveExploits1References8
Rows per page
Query Builder