CVE-2026-3793: SourceCodester Sales and Inventory System GET Parameter sales_invoice1.php sql injection
A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This vulnerability affects unknown code of the file salesinvoice1.php of the component GET Parameter Handler. This manipulation of the argument sellid causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3793?
CVE-2026-3793 is classified as a high-severity vulnerability due to its ability to allow SQL injection attacks.
How do I fix CVE-2026-3793?
To fix CVE-2026-3793, ensure input validation and parameterized queries are implemented to prevent SQL injection.
What components are affected by CVE-2026-3793?
CVE-2026-3793 affects the GET Parameter Handler in the sales_invoice1.php file of the SourceCodester Sales and Inventory System.
What type of vulnerability is CVE-2026-3793?
CVE-2026-3793 is an SQL injection vulnerability that affects web applications.
Can CVE-2026-3793 be exploited remotely?
Yes, CVE-2026-3793 can be exploited remotely by attackers to manipulate database queries through unsanitized input.