PT-2026-55755 · Sourcecodester · Multi-Vendor Online Groceries Management System

Chr1S · Publicado 2026-07-05 · Atualizado 2026-07-05 · CVE-2026-14692

NVD

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save shop type of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Exploit

Correção

SQL injection

Special Elements Injection

Enumeração de Fraquezas

CWE-89

CWE-74

Identificadores relacionados

CVE-2026-14692

Produtos afetados

Multi-Vendor Online Groceries Management System

Referências · 7

• 🔥 https://github.com/lee945/cve/issues/3 · Exploit
• https://vuldb.com/cve/CVE-2026-14692 · Nota
• https://vuldb.com/vuln/376288/cti · Nota
• https://sourcecodester.com · Nota
• https://vuldb.com/vuln/376288 · Nota
• https://vuldb.com/submit/846832 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-14692 · Nota de Segurança