CVE-2026-4569

Medium CVSS: 5.3

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /view_category.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

Vendor

Product

CWE

CWE-74

Yayın Tarihi

2026-03-23 04:16:18

Güncelleme

2026-03-23 14:31:37

Source Identifier

cna@vuldb.com

KEV Date Added

Kategoriler

CWE-74 MEDIUM 2026

Referanslar

https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-ViewCategory-searchtxt.md https://vuldb.com/?ctiid.352406 https://vuldb.com/?id.352406 https://vuldb.com/?submit.775164 https://www.sourcecodester.com/