PT-2026-43031 · Sourcecodester · Simple Inventory System

C4Ttr4Ck · Published 2026-05-25 · Updated 2026-05-25 · CVE-2026-9446

Mitre

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

A vulnerability has been found in SourceCodester Simple POS and Inventory System 1.0. The affected element is an unknown function of the file /admin/edit customer.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Exploit

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-9446

Affected Products

Simple Inventory System

References · 5

• 🔥 https://gist.github.com/c4ttr4ck/599151a2b90c1cd620933c992873c67a · Exploit
• https://sourcecodester.com · Note
• https://vuldb.com/submit/813613 · Note
• https://vuldb.com/vuln/365427 · Note
• https://vuldb.com/vuln/365427/cti · Note