CVE-2026-4569: SourceCodester Sales and Inventory System HTTP POST Request view_category.php sql injection
A vulnerability was determined in SourceCodester Sales and Inventory System 1.0. This impacts an unknown function of the file /viewcategory.php of the component HTTP POST Request Handler. This manipulation of the argument searchtxt causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4569?
CVE-2026-4569 has been classified as a high severity vulnerability due to its SQL injection potential.
How do I fix CVE-2026-4569?
To mitigate CVE-2026-4569, ensure that input validation and parameterized queries are implemented in the /view_category.php file.
What systems are affected by CVE-2026-4569?
CVE-2026-4569 affects version 1.0 of the SourceCodester Sales and Inventory System.
What is the impact of CVE-2026-4569?
The impact of CVE-2026-4569 includes the potential for attackers to execute arbitrary SQL queries and manipulate the database.
Is CVE-2026-4569 exploitable remotely?
Yes, CVE-2026-4569 is exploitable remotely via crafted HTTP POST requests.