Submit #775174: SourceCodester Sales and Inventory System 1.0 SQL Injectioninfo

TitleSourceCodester Sales and Inventory System 1.0 SQL Injection
DescriptionA SQL injection vulnerability exists in Inventory System version 1.0. The vulnerability occurs in the update_purchase.php file, where the sid HTTP GET parameter is not properly sanitized. This allows an authenticated attacker to inject arbitrary SQL commands.
Source⚠️ https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdatePurchase-sid.md
User
 Anonymous User
Submission03/08/2026 15:31 (5 months ago)
Moderation03/24/2026 16:12 (16 days later)
StatusAccepted
VulDB entry352799 [SourceCodester Sales and Inventory System 1.0 HTTP GET Parameter update_purchase.php sid sql injection]
Points18

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!