CVE-2026-3793

CWE-74CWE-89 — SQL Injection3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 98.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Sales AND Inventory SystemAhsanriaz26gmailcom Sales AND Inventory System
Timeline
PublishedMar 9

Description

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file sales_invoice1.php of the component GET Parameter Handler. This manipulation of the argument sellid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Sales and Inventory System GET Parameter sales_invoice1.php sql injection↗2026-03-09
▶
GHSA
GHSA-2h27-2gxp-mwg2: A vulnerability was determined in SourceCodester Sales and Inventory System 1↗2026-03-09
▶