PT-2026-43031 · Sourcecodester · Simple Inventory System
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:L/Au:M/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
SourceCodester Simple POS and Inventory System version 1.0
Description
A remote SQL injection can occur due to improper handling of the
ID argument within an unknown function in the '/admin/edit customer.php' endpoint. SQL injection is a type of flaw that allows an attacker to interfere with the queries that an application makes to its database.Recommendations
As a temporary workaround, restrict access to the '/admin/edit customer.php' file or avoid using the
ID parameter in that endpoint until a fix is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Special Elements Injection
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Simple Inventory System