CVE-2026-4826

CWE-74CWE-89 — SQL Injection3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.0%
top 92.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Sales AND Inventory SystemAhsanriaz26gmailcom Sales AND Inventory System
Timeline
PublishedMar 26

Description

A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /update_stock.php of the component HTTP GET Parameter Handler. This manipulation of the argument sid causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-9gr5-mvp6-h2hx: A vulnerability was determined in SourceCodester Sales and Inventory System 1↗2026-03-26
▶
CVEList
SourceCodester Sales and Inventory System HTTP GET Parameter update_stock.php sql injection↗2026-03-25
▶
CVE-2026-4826 (MEDIUM CVSS 5.3) | A vulnerability was determined in S | cvebase.io