CVE-2026-4826 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /update_stock.php of the co…
Medium CVSS: 5.3

CVE-2026-4826

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /update_stock.php of the component HTTP GET Parameter Handler. This manipulation of the argument sid causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Vendor
-
Product
-
CWE
CWE-74
Yayın Tarihi
2026-03-26 00:16:41
Güncelleme
2026-03-30 13:26:50
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 MEDIUM 2026

Referanslar

https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-UpdateStock-sid.md https://vuldb.com/?ctiid.353126 https://vuldb.com/?id.353126 https://vuldb.com/?submit.775177 https://www.sourcecodester.com/