CVE-2026-4779 in Sales and Inventory System
Zusammenfassung (Englisch)
A security vulnerability has been detected in SourceCodester Sales and Inventory System 1.0. This issue affects some unknown processing of the file update_customer_details.php of the component HTTP GET Parameter Handler. Such manipulation of the argument sid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Veröffentlichung
25.03.2026
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 352797 | SourceCodester Sales and Inventory System HTTP GET Parameter update_customer_details.php SQL Injection | 89 | Proof-of-Concept | Nicht definiert | CVE-2026-4779 |