2 matches found
CVE-2026-4780 SourceCodester Sales and Inventory System HTTP GET Parameter update_out_standing.php sql injection
A vulnerability was detected in SourceCodester Sales and Inventory System 1.0. Impacted is an unknown function of the file updateoutstanding.php of the component HTTP GET Parameter Handler. Performing a manipulation of the argument sid results in sql injection. The attack is possible to be carrie...
CVE-2017-17624
PHP Multivendor Ecommerce 1.0 has SQL Injection via the singledetail.php sid parameter, or the category.php searchcat or chid1 parameter...