Submit #775171: SourceCodester Sales and Inventory System 1.0 SQL Injectioninfo

TitelSourceCodester Sales and Inventory System 1.0 SQL Injection
BeschreibungA SQL injection vulnerability exists in Inventory System version 1.0. The vulnerability occurs in the update_category.php file, where the sid HTTP GET parameter is not properly sanitized. This allows an authenticated attacker to inject arbitrary SQL commands.
Quelle⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdateCategory-sid.md
Benutzer
 Anonymous User
Einreichung08.03.2026 15:29 (vor 28 Tagen)
Moderieren24.03.2026 16:11 (16 days later)
StatusAkzeptiert
VulDB Eintrag352796 [SourceCodester Sales and Inventory System 1.0 HTTP GET Parameter update_category.php sid SQL Injection]
Punkte18

◂ ZurückÜbersichtWeiter ▸