A vulnerability has been found in SourceCodester Sales and Inventory System up to 1.0. The impacted element is an unknown function of the file /add_sales_print.php. Such manipulation of the argument sid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-AddSalesPrint-sid.md | Exploit Third Party Advisory |
| https://vuldb.com/?ctiid.349731 | Permissions Required VDB Entry |
| https://vuldb.com/?id.349731 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.768037 | Third Party Advisory VDB Entry |
| https://www.sourcecodester.com/ | Product |
Configurations
History
09 Mar 2026, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/meifukun/Web-Security-PoCs/blob/main/Inventory-System/SQLi-AddSalesPrint-sid.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?ctiid.349731 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.349731 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.768037 - Third Party Advisory, VDB Entry | |
| References | () https://www.sourcecodester.com/ - Product | |
| CPE | cpe:2.3:a:ahsanriaz26gmailcom:sales_and_inventory_system:1.0:*:*:*:*:*:*:* | |
| First Time |
Ahsanriaz26gmailcom
Ahsanriaz26gmailcom sales And Inventory System |
08 Mar 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-08 17:16
Updated : 2026-03-09 15:17
NVD link : CVE-2026-3753
Mitre link : CVE-2026-3753
CVE.ORG link : CVE-2026-3753
JSON object : View
Products Affected
ahsanriaz26gmailcom
- sales_and_inventory_system