CVE-2026-3793

SourceCodester Sales and Inventory System 1.0 contains a GET parameter handling flaw in sales_invoice1.php (sellid) that enables SQL injection. The vulnerability is remotely exploitable and has publicly disclosed exploits. Remediation guidance from PT-2026-23998 suggests applying a fix to the SQL...

CVE-2026-3793

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file salesinvoice1.php of the component GET Parameter Handler. This manipulation of the argument sellid causes sql injection. It is possible to initiate the attack...

SourceCodester Sales and Inventory System SQL注入漏洞

The SourceCodester Sales and Inventory System is an open-source sales and inventory management system developed by SourceCodester. Version 1.0 of the SourceCodester Sales and Inventory System contains a SQL injection vulnerability. This vulnerability arises from incorrect operations with the sell...