PT-2026-27043 · Sourcecodester · Sales/Inventory System

Fukun · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4570

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was identified in SourceCodester Sales and Inventory System 1.0. Affected is an unknown function of the file /view customers.php of the component HTTP POST Request Handler. Such manipulation of the argument searchtxt leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4570

Affected Products

Sales/Inventory System

References · 6

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-ViewCustomers-searchtxt.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4570 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/?id.352407 · Note
• https://vuldb.com/?ctiid.352407 · Note
• https://vuldb.com/?submit.775165 · Note