PT-2026-27522 · Sourcecodester · Sales/Inventory System

Fukun · Published 2026-03-24 · Updated 2026-03-24 · CVE-2026-4779

NVD

CVSS v2.0

6.5

Medium

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security vulnerability has been detected in SourceCodester Sales and Inventory System 1.0. This issue affects some unknown processing of the file update customer details.php of the component HTTP GET Parameter Handler. Such manipulation of the argument sid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2026-4779

Affected Products

Sales/Inventory System

References · 6

• 🔥 https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdateCustomerDetails-sid.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4779 · Security Note
• https://sourcecodester.com · Note
• https://vuldb.com/?ctiid.352797 · Note
• https://vuldb.com/?id.352797 · Note
• https://vuldb.com/?submit.775172 · Note