CVE-2026-14695: SourceCodester Multi-Vendor Online Grocery Management System Registration Users.php save_client sql injection
A vulnerability was found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function saveclient of the file classes/Users.php of the component Registration Handler. The manipulation of the argument Name results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14695?
CVE-2026-14695 has a severity rating of high at 7.3.
How do I fix CVE-2026-14695?
To fix CVE-2026-14695, update the SourceCodester Multi-Vendor Online Grocery Management System to the latest version that addresses this SQL injection vulnerability.
What component is affected by CVE-2026-14695?
CVE-2026-14695 affects the save_client function within the Registration Handler of the classes/Users.php file.
What type of vulnerability is CVE-2026-14695?
CVE-2026-14695 is classified as an SQL Injection vulnerability.
What can an attacker do with CVE-2026-14695?
An attacker can exploit CVE-2026-14695 to manipulate the Name argument and execute unauthorized SQL commands.