CVE-2026-19925: SourceCodester Stock Management System Master.php delete_supplier sql injection
A vulnerability was detected in SourceCodester Stock Management System 1.0. This issue affects some unknown processing of the file /classes/Master.php?f=deletesupplier. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19925?
The severity of CVE-2026-19925 is rated medium, with a score of 4.7.
How does the CVE-2026-19925 vulnerability occur?
CVE-2026-19925 occurs due to improper handling of the 'ID' argument in /classes/Master.php, leading to SQL injection.
What are the potential impacts of CVE-2026-19925?
The potential impacts of CVE-2026-19925 include unauthorized access to database information and manipulation of data.
How do I fix CVE-2026-19925?
To fix CVE-2026-19925, ensure proper input validation and use prepared statements for database queries in the affected code.
Is CVE-2026-19925 exploitable remotely?
Yes, CVE-2026-19925 can be exploited remotely, allowing attackers to launch SQL injection attacks from outside the system.