PT-2026-27520 · Sourcecodester · Sales/Inventory System

Fukun · Published 2026-03-24 · Updated 2026-03-24 · CVE-2026-4777

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0. This affects an unknown part of the file view supplier.php of the component POST Parameter Handler. The manipulation of the argument searchtxt results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4777

Affected Products

Sales/Inventory System

References · 6

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-ViewSupplier-searchtxt.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4777 · Security Note
• https://vuldb.com/?ctiid.352795 · Note
• https://vuldb.com/?id.352795 · Note
• https://vuldb.com/?submit.775169 · Note
• https://sourcecodester.com · Note