Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2026/03/10 2:12 a.m.•13 views

CVE-2026-3792

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

8.8CVSS6.4AI score0.00491EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/09 3:30 a.m.•20 views

EUVD-2026-10282

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

8.8CVSS6.4AI score0.00491EPSS
SaveExploits1References6
OSV
OSV
•added 2026/03/09 2:15 a.m.•15 views

CVE-2026-3792

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

8.8CVSS5.6AI score0.00491EPSS
SaveExploits1References5
NVD
NVD
•added 2026/03/09 2:15 a.m.•13 views

CVE-2026-3792

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

8.8CVSS0.00491EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/03/09 1:02 a.m.•43 views

CVE-2026-3792 SourceCodester Sales and Inventory System GET Parameter purchase_invoice.php sql injection

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

6.5CVSS0.00491EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/03/09 1:02 a.m.•7 views

CVE-2026-3792

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

6.5CVSS6.4AI score0.00491EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2026/03/09 1:02 a.m.•7 views

CVE-2026-3792 SourceCodester Sales and Inventory System GET Parameter purchase_invoice.php sql injection

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

6.5CVSS6.3AI score0.00491EPSS
SaveExploits1References5
CVE
CVE
•added 2026/03/09 1:02 a.m.•33 views

CVE-2026-3792

SourceCodester Sales and Inventory System 1.0 contains an SQL injection in purchase_invoice.php (GET parameter handler) via the purchaseid argument. The flaw is exploitable remotely and exploit code is public (PROOF-OF-CONCEPT). Affected component is the purchase_invoice.php file; root cause is u...

8.8CVSS6.3AI score0.00491EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2026/03/09 12:00 a.m.•18 views

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect handling of the purchase...

8.8CVSS6.7AI score0.00491EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/09 12:00 a.m.•2 views

CVE-2026-3792: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file purchaseinvoice.php of the component GET Parameter Handler. The manipulation of the argument purchaseid results in sql injection. The attack may be performed from remote. The explo...

8.8CVSS6.3AI score0.00491EPSS
SaveExploits1References1
Rows per page
Query Builder