Enviar #775171: SourceCodester Sales and Inventory System 1.0 SQL Injectioninformación

TítuloSourceCodester Sales and Inventory System 1.0 SQL Injection
DescripciónA SQL injection vulnerability exists in Inventory System version 1.0. The vulnerability occurs in the update_category.php file, where the sid HTTP GET parameter is not properly sanitized. This allows an authenticated attacker to inject arbitrary SQL commands.
Fuente⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdateCategory-sid.md
Usuario
 Anonymous User
Sumisión2026-03-08 15:29 (hace 1 mes)
Moderación2026-03-24 16:11 (16 days later)
EstadoAceptado
Entrada de VulDB352796 [SourceCodester Sales and Inventory System 1.0 HTTP GET Parameter update_category.php sid inyección SQL]
Puntos18

◂ AnteriorVisión De ConjuntoPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!