PT-2026-27046 · Sourcecodester · Sales/Inventory System

Fukun · Published 2026-03-23 · Updated 2026-03-23 · CVE-2026-4572

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A weakness has been identified in SourceCodester Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /view product.php of the component HTTP POST Request Handler. Executing a manipulation of the argument searchtxt can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-4572

Affected Products

Sales/Inventory System

References · 7

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-ViewProduct-searchtxt.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4572 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/?ctiid.352409 · Note
• https://twitter.com/VulmonFeeds/status/2035958109152100397 · Twitter Post
• https://vuldb.com/?submit.775168 · Note
• https://vuldb.com/?id.352409 · Note