PT-2026-55755 · Sourcecodester · Multi-Vendor Online Groceries Management System

Chr1S · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14692

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function save shop type of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-14692

Affected Products

Multi-Vendor Online Groceries Management System

References · 7

• 🔥 https://github.com/lee945/cve/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14692 · Security Note
• https://vuldb.com/cve/CVE-2026-14692 · Note
• https://vuldb.com/vuln/376288/cti · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/376288 · Note
• https://vuldb.com/submit/846832 · Note