SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-38213)

Sales and Inventory System is a sales and inventory management system. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter stockname1 of the file checksupplierdetails.php. Attackers can...

CVE-2026-3790

SourceCodester Sales and Inventory System 1.0 contains a SQL injection vulnerability in the POST handler, specifically in check_supplier_details.php where modifying the stock_name1 argument enables remote exploitation. The flaw arises from unsafely handling input, allowing an attacker to manipula...

CVE-2026-3790: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file checksupplierdetails.php of the component POST Parameter Handler. Executing a manipulation of the argument stockname1 can lead to sql injection. The attac...

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the paramete...