CVE-2026-14692: SourceCodester Multi-Vendor Online Grocery Management System POST Parameter Master.php save_shop_type sql injection
A vulnerability was detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0/5.7.26. Affected is the function saveshoptype of the file classes/Master.php of the component POST Parameter Handler. Performing a manipulation results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14692?
The severity of CVE-2026-14692 is rated as medium with a score of 6.3.
How do I fix CVE-2026-14692?
To fix CVE-2026-14692, update the SourceCodester Multi-Vendor Online Grocery Management System to the latest version that addresses SQL injection vulnerabilities.
What type of vulnerability is CVE-2026-14692?
CVE-2026-14692 is classified as an SQL Injection vulnerability affecting the save_shop_type function.
What systems are affected by CVE-2026-14692?
CVE-2026-14692 affects SourceCodester Multi-Vendor Online Grocery Management System versions 1.0 and 5.7.26.
What can an attacker do with CVE-2026-14692?
An attacker can exploit CVE-2026-14692 to manipulate SQL queries through unsanitized POST parameters, potentially gaining unauthorized access to the database.